last executing test programs: 3m38.862836479s ago: executing program 3 (id=1535): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x6, 0xbf27, 0x4}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0x4, 0xe, "0062ba7d8200000016001b000200f705096604"}) r4 = syz_open_pts(r3, 0xea283) dup3(r4, r3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000fa0000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x40002020) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000080}, 0x40880) 3m37.745055234s ago: executing program 3 (id=1541): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x422682, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0xdb141, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000140)={0x1, 0x1}, 0x4) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) mprotect(&(0x7f00007cd000/0x3000)=nil, 0x3000, 0x1) 3m37.501104165s ago: executing program 3 (id=1544): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000e084cd74a6afea84ffdb6d258b42000008003100080000001f00100000000000007381e9800e4751800cee4a238ecc3c5accb2d0b26ebfc191de01b688789bc33b527154b9403c7c40a124e241bdef1d2bae824dc53add05d58215499e1382d698ac6d5fc3ff48041ca16c575cbf4152349e35e1bd374ff4bf411e395da8b480693ca2bba2cbc83f6c6af521a30ccd9fc4e68467be193f3c9268903df800407fbc558b801487f5bc7fdfe968131835c3f418d1ccc2ea82408239c9667be4e7b1f57ecf9ad31694fa86fb8d9140911b4b0d6cc17be2a3b984b6f10c2aa67c6dd125f4eb0471b16f21e2a399b289f67e974497f27171ebbde0331c"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) 3m35.936350916s ago: executing program 3 (id=1553): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x20}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="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", 0xb6d}, {&(0x7f0000000000)="05ee9a442ee38531b67ae78b4814702f8afd912cd5b74703b7b82fe4068ca9e4d799eb35e61af4bbbed40d53c4c97381ce4ebcea84aba22c5c658f504c42", 0x3e}, {&(0x7f0000000480)="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", 0x195}], 0x3, 0x0, 0x0, 0x20008080}}], 0x1, 0x8004) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 3m35.695175232s ago: executing program 3 (id=1556): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x342, &(0x7f0000000700)={@random="05c38c886b60", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "020008", 0x30c, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x1000, "5c44f4de68a9a6d498e5b4b56752668c049ca7b58dc9d1a26cbe48cafc27a2ad82944a28fc3cd56b28d676348da3e28e86e472d05708f7247a357d789fec7c5e16e2c92d21637d70539597b254be159023b510f75616fbe5ebd70f819405c6e1a5e866dfaa054332eb66e7cd84e6d5f68c4d4a5b7ee42067acf9aa6ab5c22d97bf55b1a4f02d3e5f0183fc27a11536bca28a272d9e6b7735a8312413f1a8e190426e71016a3ec9c6f732c3ce74886dac33680656e2945fdfc221d19c1b555c20b79b454f610af03d7d94f4ee45bef2ccc7074fffc116b2f2f26f9eafb7a2ded13db1c2de23faa0e7ff7bd11280af375fa45ca5ed85836155bc65bba0b41d3b6e71f8eb97b1b4f755aada51cf432e52b442e8c0c85aec3cddeaf43226b0db17a33d18a4ddc58a1cb45c44aeb6dc16953cd216ed56685b3dc32361ccdf819192e34661e08f88af4787a63be64d6ac23ed8d881249b95d8c23f869dd2864fe6461c3dfcc57e547b15b71c34ba8d2212cf682c2dad4bfb6dedef80ceac80895fba89989b791cb732241cf09c08ac4e439fa7b39b0ea6c984c077cfb2c288028ac97b01969262d8ae95c2b0a574d6b3b628db3a55b622bc691ba1fd597f2c4e6638c24e57247e6997046624c8aedadf3778ab7b93e3a91ab0393deb25013f71f5f78b98af791d6cb2484fbb0a3c8946c6e31dec53074d741fc5f15661729d0a4c14384b3cbc3743293ada1e03ff4f7a0edfc3cde322886e2a5692e0ead189513321de8a61fd49685d07bada7b587462201a0c27fb3357418c63fcb7136916fb345838ab6591a983ff0e95f8597ec7ae06c8b5b2882afde60a9281fb92f167fce5439b1dcc608c453bac5a243a5339d9b5734bb9e4b25247251e817665feb6b5c4bf52fc7755aa87d0d816c6f70339236bed406e0b6cd125ae579f526d14a899cba2b6897dc8300946f4140c66641746171bec31128de878d3948099c02708db7998cdc4a0346128ff9b0707e5260312235dc51098b2a36389feb060ce33639c0cce38002c37d3d6580f3ac0e84da255a7b29916c0dd1888e3e7f180df1e2e312756268c5d5571"}}}}}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x80, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "a500e300"}, 0x4, 0x2, {}, 0x20800, 0x0, r1}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000c9ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 3m35.315979775s ago: executing program 3 (id=1560): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0xc71f5000) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000180)=""/4, &(0x7f0000001c00)=0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0xb, 0x2, 0x5, 0x1}, 0x50) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-ce)\x00'}, 0x58) r6 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), 0x0}, 0x20) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m19.390864147s ago: executing program 32 (id=1560): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0xc71f5000) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000180)=""/4, &(0x7f0000001c00)=0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c801000000000904000000"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0xb, 0x2, 0x5, 0x1}, 0x50) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256-ce)\x00'}, 0x58) r6 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), 0x0}, 0x20) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12.316591323s ago: executing program 1 (id=2521): r0 = socket(0xa, 0x3, 0x3a) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = eventfd(0x1) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x10004000000, 0x0, 0x1, r2}]) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x9, 0x6, 0x31237648, 0x6, 0xfffffffe, 0x80}]}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x228000, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa4601, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0xffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listns(&(0x7f0000000000)={0x20, 0x0, 0x3, 0x8000000}, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000072c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c7da9780ced87ef2", 0x8}, {&(0x7f00000002c0)="3594110e3c8dc3e8601ff890a93766db8ce0fa80a2f0a13930e64027f5b030be7dd93e89b0f08eb637c6a7e8de8d5990fbc806a68891fc9fc67c00ea1084d614b307d9e64c8f1129e2df1a17d84a51f104f40e7c755eabfd2c2fc0a12761a9bd5067e1aff9faa644f5a10dd66924fccc2f326f4f649f42ac40780f993743cad0ce03eab50ef5f7ae46c5f000fc92f10c192f1ab1971b698dffd78a1776ae16e793274d5eb01ea58b8fb716f4b4dc613be035b491ccc1b7731ebc9f01e3887b8ec3ec977dc56e87db0c92b138a3e9175c5dc21d22ecfc238816dd61f9", 0xdc}], 0x2, &(0x7f0000000400)=[@iv={0x48, 0x117, 0x2, 0x2f, "574df6e5ef64c4ea42c023aecc57c133ad5ea764903f3a66caf5cd473ed8d7a229d90f6d366dcc82978033b125f779"}, @iv={0x48, 0x117, 0x2, 0x32, "5141856f942e2b07c98a51a5bcd9f813591c946c55b3452c6a34de9bfd37c0c9843d9fb61ad9b7aaffaf121b38bbb61daf00"}], 0x90, 0x40}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="e120c9bb0ea247895e9cbdc93ed726a478449c976d9eb0e7c30871692832fc3d6cd30d84ff7d23d6d91be8927ac8999cc84f572960244c6192ba9dc7c78a5e4a3517281831ae6dd178c337cdb699429434e56e0d8a727e76e2374acb665880b927fdcaa887421276ecf6fc7911ec986ffe934da68b86697ef81c5d72e1", 0x7d}], 0x1, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x40}, @iv={0xe0, 0x117, 0x2, 0xc5, "b394df74ad84620978c3f63ec90561e83982adbbff34dc6b82ccfc58c4852e7efa913365617fd836fa18e9f224a34ca31126ddf40f041217cbcc2e833667beea26487e2c5de015961684227db3a6f4089528b430a24d68382879c5762bcdf24037ac66cfbd5013b0805b3083ac702aef394bdac515ba0fc2bfe48997d6d91e255c5091163e5f8eef5c567ff7026681ef46f42f1a64079ff8e68c38a6cf9627eafd2199e6b0d67bf583fe13b6b4ea7dc2fa76ec0bc461a26fd8e82600eac8617dca219ddb3d"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x3}, @iv={0x50, 0x117, 0x2, 0x37, "845fac7523a8e79ad7f7c44fcc38b484c2602075de1bcadf4df8ede937c7e18e9253a03cb1c9bf84f0d52ace58522f611dc24586ec8edc"}, @iv={0xb8, 0x117, 0x2, 0xa1, "932c843da18f785ee899944f26813b1ca17287e77b9c2332d6f36e4596346a03bbcf5c10e1424e879aa16cb8fc9c8fdc3a530a90c819f78d0f60da8920fd378312a7ab949007ed0e9472ad4cd1a5b52f0d692a3a1510b264e678bd90f0fe7258e4eb6fbe123b20bc808ab39db7e4e8d22d1bf76458709e580e76888f3f36c1419edcef8c319289b8d046d5d73d00b2520321a4fb82db545532ff34e4e897457ac0"}, @op={0x18, 0x117, 0x3, 0x1}], 0x248, 0x10}, {0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000980)="3f304591325b78042a69591f86edd8725971e4efe9a859da5a464c167b3e48c86b696f62b5a8ee87de716115baa75cf64272a211d06c55dbe90f7ae41a367658123698599b2b5a1a2a9bfbfed6ad0807d83b29cbf298eb79dfc880c2c20e202b06abfa20d9da44c540194e76244be3a3e485fdd372989c44c28bde442a82108e4238db09fda0c168955e05f2c2d1668646bc7bad8ecc8c6d840d5eec2975fb795071b0f6794170bb4f71e2293d27822b662daf69940a44974bd93d6827f88a42d710130bb64c469a7599b8afcfafb400b0515e234297e7d6", 0xd8}, {&(0x7f0000000a80)="a5d64d46641c9095803a28b16d00e8233f76292c187a4c71edc21200bb01bc85f79818a0ab44493bfb7cda749b6e9dc25242d7a4a770150963b68eab091a69c9e80fe343586a5cd866de2f9d89f5be4eeb0f62cb806e3bff974cb3c9876d8e48dd0b3ea56fadf65c", 0x68}, {&(0x7f0000001340)="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", 0x1000}], 0x3, &(0x7f0000002380)=[@iv={0x18}, @iv={0x68, 0x117, 0x2, 0x4d, "9304179715f23d5ea663f360e8d18841e1e7e26944b90018683f6fc22e0886ce804b541bf992e5efe377c62eaf1a5402a3f391809fc535e81d0e07496c6ed9a6d21ee970671169cea86347ba9c"}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @iv={0xb8, 0x117, 0x2, 0xa4, "798aa22e87a466ff3ee33027430926e96f291a51b3e5f3d4b23320c4ba8b4a3faf890a148cb7f2325f1809c620dbe3d193f106674dc1396ed248424e90c1cf0f025277175fa0be91f498ba87ee5d69bda8dca53fa1235e61cc3f2094fb3d0e3c7703e03507a98f721a6dbc4001c0bc6b04d2ac1710c1f5142478837b9960be6226e8c4433232c3b141e137250014e73c4afed64ae4424c1c3bff30ca4c77fb106e361bbf"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xa, "a33007b131daec222e8e"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x1e8, 0x20004000}, {0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000002580)="78c17abd16d64214d42509e72cf066d23564971c5d7e27a470f85e1373346f50c701e9e329a50d91d15e36", 0x2b}, {&(0x7f00000025c0)}, {&(0x7f0000002600)="5470921bc96001344fcd37538261581583628f0881171efe1453eb8d52399046a4", 0x21}, {&(0x7f0000002640)="b0a43ed232fe14bfba50ce1a046b99bdbdc643a64db356b71832d39bc21ea49584c45504877affaee442b0cbe04f179dfc1c18598278aa33cc34477af8e03dec0b1afddc1a9e87110622058d4315416fc7a6ce4a252c67a9cfa9063f4014cd51ec615165d08e486d4ce81563dc7aed3720f02602a538b6679f4c16b0b82184e140680451ff0512499d453395aab6d245b19bb6593286ade2655c72df186eaafb5438ad69e2baaf3913c2fefc58da37f1a44ea83937a7d8c4fa462c6951c29faa34bfa099f4659693fdea693fdc55f312", 0xd0}, {&(0x7f0000002740)="37740ff6286672cef62af44accfa2d4f72b9419fa0c0dd98bb60c333c0234f2f817fa3e830e568503c8d4a913e23d51ac1f2a6d48a528822ad54abfea63f8a4b10f01c6f7cd0241f767d4c26359bf6d21ee082e1d2a6bcab5d3df0a649fc84023934afbd08d4cdb1d9e63103fd90d1cf4b79463236", 0x75}, {&(0x7f00000027c0)="d1840c6df4df3e7915e5e1bf62f4d8b5f693aa6202a93579178c73bc2879dfac59b757736d0f7e55ea20577da6d60991f2081c1c119681bc65233934f476dcc41a90ed282d71b282720d4007d205084a0542c2c7933bc5bf2edcad1f0ea0c7835aa45ca0ddbe06798ea108bbc320500cfcd3a2bf7a3dc189a86902f44fc00ab5628510bed915e326cb9d00409e9606f50d6fe30624ec0e1da4c557f541bd1bf8b963d12626ddab37e3468a371121863ff83cfbfac6bb0d816a889af00e3b10e012b64b61678037aa40cadad3c4f125bd864471097dcee3fa436f0490a3eb21ec20606075", 0xe4}, {&(0x7f00000028c0)="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", 0x1000}], 0x7, 0x0, 0x0, 0x2000080}, {0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003940)="a54d11173aec7176bb4d48d9ec6fc680ac2ad54de59aa1d26c77608591de0f8969b34d547332a56834446563b74f2a195a07c5b60a2886c9c1d6df521c0b8099747c8f54d612ec5da18a2b2c90332f4a7af948afcaf3b70a2a28a3cc7e3c7c839827ee99dc3a63df", 0x68}, {&(0x7f00000039c0)="1cf2b6a72b9d7ac814113b58", 0xc}, {&(0x7f0000003a00)="0a0e5aaf97479bcf8234698725527912adea7efdbf0ffbe837159ad58037d41a52d2abe041ab8bbef50ee7e159e59d6feeed4433274639d32f4877a2faec052beba2b1a3d4426c29961df266c9d87de5600dd2d9b2dd8bdddcad6a28cc9eb4414b009fb9e04edf7cabf151fd70d2ff649ac3e3b32c73e532d843ec300ad09a47e303a8df9a7ea230f1048b82a5f3451e63654b8c3d9a2caf4e94c89fa54e09120168b416e43f6b87b8058aaa419ae3848f0e884c34de188392aaba4196852aaa68d6db79e2d23f", 0xc7}, {&(0x7f0000003b00)="dca4981c19d7256a32a7ce591a7ae330467b2596a03aca7cb536332b7e9be78c9f10426cea0c88849eb591f2b97014ba4e35f9dbe9cdf219d3e3105d388bc245941a9c90c45bbc76e47d2da80da8cbd7529e05d32b5813da75c9ed15170faa271a98ead84642e4913d70c4525e78cad3a89a3388a7cfe406dba3017b360c21533e2dc5b78264633649e9de5e3b775bea51ab0091e8f32d292ffc5302065a5fc7ecf8cdb343ec987804ada4c6c71594b43353fbf1c228954646164f7f1fcec8735bfb79140823872c3404cfc3f366ede7d11fc9fae5ec51535431c966ba40491873436f3436ed7576b055132df48042f9e1ac6f57d221", 0xf6}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="b64c5700fa0c5c7c71fd71dfec9fcaf2a67af41562d6a8cd9e3ec70bc339819a475a13095a2e8382b02064aa69dc26a62614ba46cd7966657386911a9c64493ca4c63e53b279a81b83b44a33834dfc60828353d80dcf9638ff6306d2410c1f13b719c38529b8a847ff83af5a911939f8bc18623b84888b156b754e565d73ad4cb317923bbdbba92c84831f29c87ce68d16bff2967ca286dfd1717e292d6deaa07feda83dfecbe896004272ece4be815d71be6b183f4ba5ee1ed694ab93d2f4d69f9d031c1ef5f3", 0xc7}, {&(0x7f0000004d00)="59e4ea90030aeb9d01e41bef5c4ba138da91927d45d3e07c8f1ca188fd5644cc3116acbb298410ee00c80bd3e72db5e9ba9de4889540a53635cbdfe77e7b3eb3d3ef0bee4f63f2320283ee09e0e704ef048363db0a02c57408d189d563f653a7ee294a025d457bc1485d151f42a46abf6c149e45e2cadb91486fe516f6a36f58d5c80f5716c2d36818d7c596c6b9d61285d8216a1889f9c90937014c52acf2f7408f1c", 0xa3}], 0x7, &(0x7f0000004e40)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x6, "9af61b8f31ba"}, @assoc={0x18, 0x117, 0x4, 0xfd7d}], 0x80, 0x4800}, {0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004ec0)="2e376557db9d39431757c7cafab7a0ecbcffaa79ac39acf10f656db62a93ae474ddf0d32fed759810bee8f132f056894003a912464db7acc78ae36dd7adf65306f4a5e580e02238a8c2c19dcdfc8245f506166b1973ec0d4443443d9b51de2172bf3dc66df1260f485a83129796d803b17a68d264c386d69529f832ec7790dfe052c5464855df33da91ba3ca4da059bdcf1d0121f3ceaaa852050ad3f94ecb1ffc0ed046b822095239d5e46a4252faeaac20a914be8d5d8dbc87795c131ecd0f2a6912e3211337b648f271", 0xcb}, {&(0x7f0000004fc0)="be03edde6c0da919f1eaba0304c99ec3eb484ac79b3802818138fca7c65b7b75c67f9df5ec80005b8e16c2d4da6ff28ba2beb9dddd23e86c7420127cc01adba16da61f074435ed149c9c4aea99d4e90d6fb9b041296321f43830a069", 0x5c}, {&(0x7f0000005040)="2250c6aa886396bd1442cecf624c03c17bb980273cf84cce915ffdeca176b3c407f6242205c701dfedd39409b55986c77f4812088d5f319a2d3f02463119015a138ea0834332270bcd313789313b031e4f0d1d3e33c5831ac4b911c3378a1432d265aaffe94843c1d0ff2b183aae21102080d54cecbe891e491377da69b2c5fc7d5fb920c51aa42ee6d8f30dd6b96cff82f8301f7700909239cb1061ab9267ab7711ff12ad571bc3091727bbcb564c82ed21330cbe684171a06d98d9e44d0627e43fad91a7dcba7aa6eb40a511450c3d465058c70cda0376a4cbe7ec8be33186b55e0bd690a274e9a14387a5eb9e2a33", 0xf0}, {&(0x7f0000005140)="b0560891879a0694ddd907c178d7442df9b9c027343a8c348d1ebfc5275b05ffe6b12359b24d45fc0cdb0a9b00b8f642abd17b4a3e3a59", 0x37}, {&(0x7f0000005180)="80b89fe6d2245b885ca29e1931ebecd080533e676c0412b2060b6b461e4e67b4e84495095bdb7f907530ff654f3c2518456a0986e40e58cf58295e949132c0fa1504f49702d4f55e425645e45b8b5731178de93580d037b39e55c8de1d57ac1d4268e3df958aacfc2bf9b68fda5e9b3f0032da80bd10d7ad9e4dc900a31eafe5da5ae1b976162b6612dc79b746c1425e96a3ecdbabf0500de05c0f1c48c09ee3b74755f2043bbc61ee95dd84f82415897b875e3830fc787021", 0xb9}], 0x5, &(0x7f00000052c0)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10001}], 0x48, 0x40}, {0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000005340)="63b2ab7885c198e1a2a684641f8ef495f2c2a8b67389db537a3b3aeedaa2f4d23123b5406308d0e64bfd26a377b02089f463b6b35b6c25fad35c590c8df12ba0bd4ab63bb57bd685a56961ad201c463b162800a377bfb85e3cd867e6d00563e327334441341e9e721c06e6c2060b4a511c26babd927dd337aed90ceabc24dabc60224419786441b1b8df0d3248885e96e5388307e16388c61f9d7c718018cedf2336c6e7c6648fd6421e82e79efc439c30b9118312675539f90d2d4663760073a9d3ad78e35ffcf17fa6c46db1f8dd0e97ffa52394232951a9b4c5b4ac2400d6051d7bb67706facff67b0a576850747901b4d35ce4923301cd936f6152d636cc0537cd9e471356d063e577a82575477f5ed55218115ea5e5e8c98ac312b036d04f6c6894f7189a215fb8818b46a1afcfd6a8c781284f94b418d1b284ae4e40c2fddd05f93b0057c32507c1f5433e48343144e5bdd09355dd471d40a5da1ad606634b628dd804de772463336ce5b6b7873dd9808a3e40faa90d1dbfdd05b2dcc69b5b611466cd3654ef4dc0df0f18ad375efe3b75046535c105f64679365a3b65a2507fa1564918700ab5a6d74d00a9430f229b1524ec7dd4414ca566f5f7cc9bc68e4ea3b5d2616a3eeea52f1b59d542caefb709033a90147e69dc453ee8ab7b645fdec27a40406cb98c945a3f59202ccfbcac56141245fb02d0fbc86740fd12c6cab4777a94780e5cae4ce6787e3c48a97eee14608a72ed7450c02298768228db6ef19bd9af425d2d3ebc8effce1225652df161b80da215a9bef0b287bf11d069677cf90996b47cac6925770d2237b48785fd5d85b517bb4dacf82a7d595aabe6dcbd6a7f6874f783cb825f34ceb0c8c90b02d616b45858b25e510e0fda89e8aaf31ae3930f2745a633c0368d253cd02a520ebc808cc80ab049594ed13ab86a82153af0f1daeada2a67a367967d96528ea3f3f7610ea85449719b77ddb1e3d0775464cf34c35e99da270eac714048e9c2814ce12089090f444bd96154f51535650e08306d45ec48f38b9b24cd9c7f90b3e767bf260306600936fe14730d38436296a473baa3e9871a84b89ac4aadc2eccd84dc7ded0cd711b89f5b05c78f1e61b56f6d1735c7cf29339bd721a75841927809185be0200eb11f2f369b200a41742e1e36867b3dc9891b4155902fb3813843cc3608c3d9881101bca784d43ef3dec55244571dc867aa0c4541e9fc5d8b98139f5cfc9244e5dc10d8f94106b9fff3532a0f9efb1d6b71033ea97b0beaa5f907274423227c43f1759b86e85cde83aad2f4c49bdd850ed11723e9d8c196fe9af67d30a8446b832f86b0c7d826c84f99df130cbfb3f86ccb77dde812d953821a9f7dfa3102e6c6bb69904145f4e06e4442495b3af57ddf95d042ae879012d7433a0840d95a206f13e3905d27e090222e03389bd093e741115b00e4b141d514866feacc85f37772ad4bfebad919146a3bd1a7b03993f3b0c60c0b8100931bbbbd6d360fa0c0470fa5b6f7efb5bc5f1e87905420cc6ff6eba78a64d32c2d22c74d4ef37f77bacaedf698d7c7c99000effdd39b33ef4044bf4305c0143f68a8c98bbdb6984d0e3c9faca61e7ec9421edb32772d4ce7f0b817b9b7e9c8f622290052d2693580691c77f7501e57157c28f13c60c6c7ed9e7a370a83cd0c691bc826fbfab8cd1ffd4939d9a0a9cbcf6e6c555c66dd25272f83e3bfe7acb414c32354d059fc7467f5397382b098bed5cb67de314c3db72b23774139f76d0913a9c1f303653e0153f77618e42b652fc23316caf8a6e9176e8807d3059e2a19b4f155b90c5d32aeaccb193bd82b127ecfdf8edc99dcbcee18bbdd15252e36c5deeda7a092409fc9b8ca34f7f5739210d061f6720cade03cd3ff94c6386f6944c98da55a4d0e0c5690fcd5f78f177bac040fb168f0b7863f29b6534c86421274127762edad82b00910fc276667e250d5ebbe871a7efb2addde04cd55d3488d30162193b1534b8f893d180f7936e8fe84e8f073ad3e6108ffb0ce32a58338b5ae86d90d513508a6df9bb7169b38c73b51e0a80f96fc4e4f1feae864e3362ee283b81cf9f468fbb3d9b77c15600498d0fdbaceb326a7fa599b6f7560ba86c15a13cac07160e5689060e9977778b6c58e5555f22d6cc60829d9ded8f6573008153de16921b1c175e7815bca0b2759c66602308d30ef981f59f2529527e4b3b61335581351a97c07d6ede10f82987ec57f7ccabf5bebe2dbabdabf3699cac8482219b0e33939bc14eec997046eb8b9d8bc913559afc36d8599ecfa884de7528ffc2cfde92447c8db740c22a139008884fcfb9d26e19ebf4532e9ad14acfd7263735179077a3477a4fadbae1504731ccb2842fc75402b41b77c4bf92403a6f39bbc1aa21bb7c0fc21e080ba7bbc293e5b008f3e87b8fb34c04c961fe066699108eb6aba99619b54a2e68c2e17781199549dbbd5d6f83c7b9648abca6f93cf27ee51d71fe3cf05f9113fea047bed581a95286f8fe3b1add1ac207dff53de720c73c1f7612e1929678ed539c71812dff7d9c3d4ac5dbe8e189e9b1eb0efadcb0ef67a7ac563e201399483c1f79c18ba954c74e900cfe182e5b9cef2115840bc9febce83168ca26f4110dd0fd2254f7de63d67f45cd7ae31e0953c4d419ed77446d3f261828b12ac20a02436a813b42612750ebc0c8cb5ce1485b99cc80fb65e2ecf5acbd934c773ef5f1efba3d20ca261048443c36f7986d267e1dedb32eb4cd2861fe1d0a1df8d295e0e0d48df2b82be6f47c02a6374b87872611a370dc8427b40cf12f6a175567de4d96d824756de5be1eed72931a3e0868f70c490fb7d5b5a2684a3dd69985b77fb2f75b3c9d8caa816734ac793910d76f210e0a837217090c033bf488d34f6b6888bcc3515ef074937d5b29f60c50577a6aeb0222c0b48feda6d8bf1a6422779dc68428ac64fb253efe42539788a9a0b832fe34758569f8bff603fb97220d6fb861aa89988c0f7721e31248543f978676aeabbe8d88c8f75fb7b495d7e896fa7c82688175cc6313aacd622feb36aaabb7a9286dbdff877dc35aa56cf5e2631d5fb639a9c4aa835139e3c258b2510aa4f8b39ce224d9cd4ea932e4526fca925abc13178e339eb95158f17454b70753d12c33b089586c67e12ba9c35a95eab4d83fc8e83bb600e40d7683c5c39e83034abb0de76723f34c941cf4357dea3762b95815b1ee9956e9a26726981292d84da02e4472899b770dc66543115668f548d3f5772cb6c64605fcba14f7246f18869c6f31e9bacab8f701024a2804c00fc19b85e32ccc7aa3d949d8c864362f9d2bdbdb27832b21e9577a0b5b70419088e73ab4b6d246f34b06124b46ee0137b2002831c041a0c780acd7b44059242ae6d51073ca4b1d3fba8746949d017a70bfca20e42d6e777c517d537a517ab96d0c4944f4f3c9a22e49a9db4411ebb26b0e11bfb94fd84f2ed073810e22152b23d8461cb2c8b0be371bb830252977b1cd53e99cad81e7317baae327907f099c05e2c95dd36f9d31c49bce8f3116698b26f1ccfc34d99569371be3d0022341590f15c1f93baac72588ee1a5ddd60306c7583a589387502651c4e2311036643a22f8aabe2800f19ff7c53a3f4bae246b88db37dcff9061a9c924a6db908ab44623bc48065e9050a0e30379db61fefbdbc1eff182993922c3b844f587bb223063acfb454ab8ed382bfc9ae94d8e14008ea7aa060575bc2c156b80a551216863a77d5861d68b0ee8392feb8f440540f6a50307b3d507a5ecc6eddf34a75ec6c5c1cdf933767e769561bdc7777bc51bca5124116ac0176f3283e27974168d2480d82d4787dc92063d870dc3e479565216b696abb5fbdcb5e863d47ff1318e7d9be4f99644d651e16035dfedfbd8df5f3aef5d2b08e8007fbdd5b304c1891ead7835f6e890f2bb36e825a13ba6d1db4c57cf3ab1ababaacd78decff563cc390c1b3a03708dd629c4f033604d69f7c0377bafba9835cd7153098726be334ce9d7e3cdca3428cbc98e142d19d7757e43dce6fe2e53f0f3b72d16d2e017ccbbaaa556da7f481b8703f4580c6926df1c0a24a3598131c5483f0005d1d36d675fa1cf39670e0c37355cf8779879dbe060f270eaaa98f5b228d999aa84d4bf6b9f68b7d132b60f216c333a72b4612b73d223e51a28bb90b6f128e6a94780433f18317c2fd369a295061b8493a1b8a2daa8caec0494434d5a1af896203a0f18916fcd6bf45954f40cbd287177bc5f7ce45a8b6e9542f0e638532938c8d7fae7b3237df6fac1b011cf48274d09d0ba4d9285da2d589ef6e7f48c87a8bbeb12a873c7c40c9f0a0ccf1366c825c96c508b78661ed087280f320a48ae384817fe0e7fd30fb0c13c0de72e02f47b3625d0d397366e5070962cd6f3fc0952d4b79ec81485a087e277ef8a7384ae63af6f61c1bdaa81adbc1e22b990af0e542aa9d14b57ef426e6ed6523beffd59309ffd971d9ca30dc62ab24245d926d5cea240bd10b780fba6b70e66e0fc10c93a4a8d984e8acd8e6483a322a791ca9555fe2af956b32f046458b723f0eb6fde510295e27980cd2c320ad78d7fa81ac24799ff325df40c012e8381eca513d519d0df40258e5ca6b0c411076108c904630548558b941443214120533c245ca6c9beaa769f6263784f48581ee31ae1e6b769c0fc5a3e642faa5b0575e68ec48692c53fc9aef721da19dab335a5b2baf02ca0899ddc51bd06e3bab570be54186c3a0e7e17f5e9e74f324a902e5716cf3e82b240f92a926ca5d3e686777ecdd9bf32f18875e335a9efc1f8472d399b262e4227426f64c59df6a69cd7bf9eb08fba640e978ae73b432816be1e196e8809615062b7c6abda6a868ae183e4e67b01a2b4e9ebbc18229efb5de2a4e56257d4b33de00d2a95550a3572d53f02eb3e2e95beed626751c872bd53b7bde9f8e9492a7fd432e60349c9328c55a908d3b4b5051349d013db12bee67cfbd91c77aedded7eb465a40f911dc55e91f6c70682750c4ed5c9b980ff6648283b79ebf3e315859d73062ac9de7a94f47f2bb1c18820fd6b4b0b799f24d72f0bbeff48c33099bd2cb30f3ed23066ef360e340829b27fe371945ce91ac0bc386588fda666f6a731a4f2e6690fb90d55362d1c5040166ef68b8c930b36cd1836d32c858d5f734a5167fedcab1e66fd6dfc610243fc5d01fe441b9392eadd3bacc73db4e6f198f93df2ac268589571e42d8e7fa2c009c9afddc9688989a4300d8d6fb87a0cbea671b0589a18a843ca84f73405a846fe5ec7326ed4f6efc530f9bd32ef361cc7bdd3cf9d99733a2a9b7c52bb28e0025e8e6925b1fd1c9f3affcc6f8b707fb4ebceb8ad3b58a8d348293ba9d33fa300d73cfa727b931fdf29a5eac39e235196e984d0a524d00b310342e6aac70f29decdf42e3e69018e8a45a9b96d6ff46a9316992e335054a3dd78320e85d8f30ebfdd715a39e0c0324cd3ed717a357059510f2b6e2e8b9f9e87d3f03ed8995dc29dac3ad70f04f7975cb63314cad9e3bff7b21fd16504c78ed49aaecc281d8a27c0c2409ed16a7b88ba240311748af96a806b74d2e9eddb96fe4a7e41f678cae734b1a05334c60b42c7f70a6408d79065132cfcb1db01d8fa32af6e8d4bf6d73066e95999a0c9e0f94b02e1c6a47ca7d941f86042eaa695ca4348a59a628baee82224c36313b81548e6ee5d1de8349dbec982f4a36f502d67d945e3687b87cabfe66506f9074cf71a2afc37df19d32295c97d2370d8", 0x1000}, {&(0x7f0000006340)="7530ccfd17178f510579d3e0bf7c4a4528b82f172226a6afb8725f9c2c819861c326d8d27fc80082a6de67eb62d051915409679add436abb88adbc4846", 0x3d}, {&(0x7f0000006380)}, {&(0x7f00000063c0)="435a9aa1e1c2785ff05b8a2737ad7e3873c28f381d00cf0593ae3f67a4344460835bbc9400d879c2f68616bc6181210d9e871712165ac95e1269015e69acc092f77157cb7c05a769abec2fbb6c430a0e049a865231579e25baa2622c9b3d57cd5ec6da9d9566791c6469a4328c670433dcc0134eac279b8f70198e9392dfbbd9c08db4a1e69e11174484a3dfc4781603710e3eda1e02b2b8a28dd6216edd57d38bac67d65dc89231d16dd7d9b60c0a53", 0xb0}, {&(0x7f0000006480)="02d67d8cd6b652a1649f5df5802f131f7c6894274555deac693d03a529892f074dab19c24da27d59ef8470c43481d24a07a80d", 0x33}], 0x5, &(0x7f0000006540)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x88, 0x117, 0x2, 0x6d, "74971426bb7924d97e44116e1de66a93c5a72ec4d9a01a29d14873e17eec38cb474905142c96583af065e23bd2b917eaf5fe43fdafcdf1eadefdcef25027281672a8f646dab999dab43092777a25d2f4cb2497f22a34aa3d99320d2ce2b11d8b311598378bce43403348e79ef8"}], 0xb8, 0x4000000}, {0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f00000066c0)="9a9447864a82693133062615d05bfa4b3b0e6f673a60da95174eb6e3cc4d4b861f215112e401325f3ade0ff757f9e9d8260ecfa305ed699918e865e8bcdc623dcce98ac4430dd345d20c667b989e66af6369c0d7267780329bb0a23fbb24acbbf8be61f46a2ffb7377ac86a8408c15def070cfdc26615b93a1d572cde11cb67009d02a01ea4bd57a91777d7f2a6ecf27af2d1a746e9f601ed5a320115e5de590b3afe8b6357fa1121715", 0xaa}, {&(0x7f0000006780)="608a70cff1b29e2709815e72be1169078709e18171894a912ac595119018c2b07d97f3d2ce067e5d0bc7976c0ea3414f0ed6e236ae7fb0146a182d2a5f08eddc8ca7cec37495eb2171235ec27cc178a70a77d6154abfe3252574263f2fcdb2f4c854ccaa720d0a7cd1982593b42833b457730c6195d8cd7aa36238fec30e48da3ea5160225c9babed031eecb7de81dfcf2803c0a7dadf55da85096355540324682b6ffd23363a629adb105d13911995758b2b55c8a044f483f0614c47a6c7cff49d94da196cf7939eed2db38f0c2", 0xce}, {&(0x7f0000006880)="cbeffcf222887fb4377c017f2d46588d848ccdd1625cd35722af319d82d0f002a2d2fe2dbaf02ac140c5be3398a141727d61f947d72d0b132c0a501abb747ffe67d81be9b3ff41a56271e3e28346", 0x4e}, {&(0x7f0000006900)="10898fb866d0df5463cdae530c0b0e6ddea840439e9384c640bb468de753bd2cbc4dc97326dfd844b84854315060be0b94068fbcdff1369eb9b7fd6c265be2dc30ed0040bd2722d44117290dcb81e7197cf4c1e4b501c3ab52bf6d6859c62cd299df5561fc656cce96e23c5c4156072057338e56df52f65bff310cb131059aeac92de80e232a1c424a1f87c7acca7e2d50941ab9ae2992dfe50cf84fe1f551a4edc4cbf13eb022d41d627a5e38c94acff86ff2a9b47b6b4d0cba47e81a830427f1fecc952775e94d4f646767ea22bbcb50", 0xd1}, {&(0x7f0000006a00)="a569a69df5bc97191a6f57b2053bbf05e167abf3db75607254c6ee2d751f5b3b415c0787a4b7d7c2fc0094dc5748ebc6d9609c38034756b06463a14adbe0b391a3b1a559e5db4a2e7e7bda361c0cc2b4b13df4a29ce4dc57eb45384edf6c357fa8a681eb5bce9349ffb0ea2edb85b82de4e873941078c96674ae64c35da2774bd2e8ecb8e6d22fecbe4818daec4afb4041c0c85a1760", 0x96}, {&(0x7f0000006ac0)="679c0e08485e0675677d9af9f6eb2939cdfed5e4ccc979785175541d7bf385583b7c71ff13eccb34489e42827aec3abb751e4ad8c2a124367fc2b87299342b0339685e05839c986be2135bd3e071c338776f61d21d39ad6884ac591989a365e40c0341316eabc1f3cfc57f82a5a59aae6dd8bb9d83d9febf531bac6f2ecd307073220c0e8f3f0f4d206ebfb856e1dc729e9f3cce0cefd4752f2fe2bf947a60dc4bcb84d94a6a73468e98193a82759c09f2e72e18ac4210", 0xb7}, {&(0x7f0000006b80)="558a835e1b1e811dac3449c6b3df727eb960cf7d7e995dc399482743628bbcd28c3c768a08c9fe17c34ac439b86f894ae478f3fb0f524f7f744dec5bde1bb13c508595253cf7ccb5f6832d8d99d3c68709165eed4a027594595bd1bb85e64eab35e34d283b8af8d992db7389a86baeef2f0c1ae819e03b18ad5fff53aaf3561ddf5aab88b8bba28e9b3e99a75725f92b1477e0028ef22f0c023d5be599fdd8b1aa3d0f3db21a4097c795607418005ee0ac8b253bd46a7ef6cc6e1a7dcfeb0f12109e0a6c52642c9a284fb73d8827513200b8677d", 0xd4}, {&(0x7f0000006c80)="1710d1d9817ec06ff58b2233b41aa6bd6d98acc1b6a34fe07d3c9c067c94e3e073bd82a5df92e92fdbe77ea1e95fbec5bd38a57042e8790b98c912219c788b763322e7f44fa71b8b665a2fc142d245888a38b9a46385bf92447643133886095eda6f0b358a13190cc24e2bcea46073f49a5b55007dfe8fc10a212cd0c3a4b7d202d10345e13fd6c76823eef3b6d9903ac473c59051642b67390604779727eb7426b41794a16d90de43ffa7d5815cc745fe754fd74a2592e00e04b18a974600d37d7b", 0xc2}, {&(0x7f0000006d80)="e918ee544375da8fbaf58e3e144a9c625a007a73aaa12939778018157c945edaed6976b3fe287eaa9310e6f0f6df5be5b1188952958a8b4428c7837772ebf1db7307e909a59aed9381e98e201c936d71ed61d3cac96c93f7ed91161e40b5e56e1e28fc3a96c6406b61a1e622a52b2e66d262aeae5e8c233c98cc96805bbb7f6f023b95b708f8e0520debad8341b227039cc8894b1fb0109eb470e4c45945a978d8b4ee74030bbd7315d2d4e2b3b976a9d1a1b125fcd0a06aad535a23b2089811e2f9641694a58aece225d47e371bcaf9c1b25580c9f36c724f", 0xd9}, {&(0x7f0000006e80)="0c9b09f3dc21fef3757d8e7f602503377178514d10f7dbc3bcf2a3e5d4ab47ba4b62aab565d6ce309499d7c68f13b5ca00a872d3adafa0f86ba16325922f8ae89ae6052248a9abb057f7c964c36f59abf1ef1d07459c58a5bf1910988bce28934ff53305d8083569ad401243ffcb561eb60c9349016d32fe81859d7b86b0f5905e7878076ec6127d08d8a945112d29deb4a02afd6f7d08a8c5bc0114d5e098b390bfa9fd52e275bf4d68f975a1c466bfd012f80797536e967070758f78cf03bd541a34a6c40cbe146d52652b4571de7d701afc4d", 0xd4}], 0xa, &(0x7f0000007040)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @iv={0xb8, 0x117, 0x2, 0xa4, "9eba0029731093c8234b808aed922d29b64203775858f6662b6a72144d18afb08b353fb7d7c18c8eb0fe8eb26e65753788b51488be007343a70364661cb929ee8a970358c845a20f4ce0a84526e1f05d645c7b7d611687ce468ab2aa7418c3e75e573cb6ccf3feae2b386a4eb0e2b2b4ce8ff05037960dc286908a9823e0584d959a6d60d0cd9ee3273f5898b8173a1b37d85944d348d104efe67c62f0c176735c155771"}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @iv={0x50, 0x117, 0x2, 0x3a, "bc1f321120c62a42a572137b1767e53006d044679525bcd08e93eba55b15dc350a49d8ac213d243cd9abc2ee6c0f815d14305e04f67907f02051"}], 0x168, 0x8000}, {0x0, 0x0, &(0x7f0000007240)=[{&(0x7f00000071c0)="bd5c901e3255891b75c5f3c8f05276e9f43d18eabe93bf6b6b42aedb25c7da53ccbff46b4e47924dbc20a59b2609094fee25db9aa88e2f073a9d983760c12ae9b09c9c1ad23729d643a0e36980f4fccbe65da1", 0x53}], 0x1, &(0x7f0000007280)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x4040820}], 0x9, 0x4001) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) 10.77003356s ago: executing program 5 (id=2527): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT=r3], 0xb) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) write$tun(r4, &(0x7f0000000480)={@void, @void, @ipv4=@igmp={{0x29, 0x4, 0x0, 0xa, 0xc0, 0x65, 0x0, 0x0, 0x2, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x27, 0x6e, [@broadcast, @private=0xa010102, @private=0xa010102, @multicast1, @private=0xa010100, @loopback, @remote, @broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x39, 0x1, [{0x1, 0x7, "de8e43e484"}, {0x0, 0xb, "fff092b1382e8f9c2a"}, {0x2, 0x6, "6c0c29e1"}, {0x0, 0xd, "51e54cda4a85ef3e0887b6"}, {0x2, 0x8, "0a6aa520b34f"}, {0x2, 0x6, "3d31fe9a"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xb, "0964259a04f2f57ed8"}, @timestamp={0x44, 0x20, 0x35, 0x0, 0x3, [0x6, 0x8, 0x80000001, 0x764, 0x3, 0x80, 0x6]}]}}, {0x12, 0x1, 0x0, @remote, "22840bac3127bd6d47cebee6c35249083d19476c"}}}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ptrace(0x10, 0x1) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000000), 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x26, "", [{{0x9, 0x4, 0x0, 0x46, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x200, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x797, 0x9, 0x8, 0x9}}}}}]}}]}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.205215048s ago: executing program 1 (id=2529): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x3, 0x4}}}}}]}}]}}, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, &(0x7f00002dc000/0x4000)=nil, 0x4000, 0xd}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0x7eac0, 0x3d3b4a}) (rerun: 64) r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000d40)={{0x80000000, r5, 0x3, [0x2, 0x9]}, {0x80000000, 0x0, 0x0, [0x100, 0x10e67612]}, 0x4, [0x2398c000, 0x100]}) (async, rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' 0<'], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.837237973s ago: executing program 1 (id=2530): getpgid(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x0, 0x1, 0xf2f2, 0x6, 0x0, 0xbeff, 0x0}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') getdents64(r4, 0xffffffffffffffff, 0x43) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101280, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a00000001090212"], 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0xeeee0000, 0xeeee8000, 0xc, 0x2, 0x4, 0xa, 0x0, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x4000, 0x10000, 0xe, 0x10, 0x1, 0x8, 0x3, 0xa, 0xfe, 0x6, 0x2}, {0x5000, 0x54000, 0x4, 0xf, 0x5, 0x3, 0x26, 0x6, 0x3, 0x6, 0x5}, {0x3000, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x2, 0x7f, 0x9, 0x22, 0x41, 0x6}, {0x26000, 0x30000, 0x0, 0xd, 0x5b, 0x2d, 0x5, 0xc, 0xfe, 0x0, 0xf8, 0xc}, {0x70000, 0x12000, 0x19, 0xbd, 0x6, 0x10, 0x11, 0x1, 0xbf, 0x18, 0x9, 0xf}, {0xa000, 0x8000000, 0xc, 0x1, 0x7, 0xf, 0x10, 0x3, 0x0, 0x0, 0x3, 0x8}, {0xdddd0000, 0x40000, 0xa, 0x4, 0x7, 0x6, 0x4, 0xf8, 0x1, 0x8, 0x89, 0xfa}, {0x50000, 0xedd8}, {0xffff1000, 0x17}, 0x5, 0x0, 0x1000, 0x0, 0x8000000100400002, 0x18000, 0xdddd1000, [0x8, 0x5, 0x400000000800000d, 0x100000001]}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.736320605s ago: executing program 4 (id=2531): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0xffff, 0x4) (fail_nth: 2) 8.165335964s ago: executing program 4 (id=2533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080001000000c1ff140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) 7.831903986s ago: executing program 4 (id=2534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = syz_usb_connect$hid(0x466ebb02bdbbaa6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r8, 0x4b3d, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) clock_nanosleep(0x7, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) 7.575093223s ago: executing program 5 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000120001002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200140003006e657464657673696d30"], 0x58}}, 0x400a1) 7.423025205s ago: executing program 5 (id=2536): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000140)='u', 0x1, 0x5e00fc318ea86b9, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea5, 0xa) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x102, 0x0) syz_usbip_server_init(0x6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) 7.198379751s ago: executing program 2 (id=2537): socket$kcm(0x2d, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x9, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x4800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a300000000020000000030a01010000000000040000010000000900030073797a32000000001c000000060a010300000000000000000100000108000b4000000000140000001100010000000000000000000700000a"], 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0xffffffffffffff72, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRESHEX, @ANYRES64=r0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r7, &(0x7f00000002c0), 0x4, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r5, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14) sendmmsg$inet6(r8, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x0) 6.420404521s ago: executing program 1 (id=2539): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {0x0}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8", 0x1d}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000005c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x2}, 0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r9}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000100)={[0xec, 0x1, 0x80, 0x38000000000000, 0x6c, 0x4, 0x4, 0xf0, 0x5, 0x10, 0xffff, 0x0, 0x1, 0xff, 0xb08, 0xfff], 0x0, 0x80}) 5.612478073s ago: executing program 5 (id=2541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"}) r5 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r9}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r7) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000004) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @loopback, 0x3}, 0x1c) 5.172404122s ago: executing program 1 (id=2542): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x9, 0x0, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)={0x40, 0x0, 0x8}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0xffffffff, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x4], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffbfffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x2e2e778e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xfffffff7, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x2f, 0x30, 0x4}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a0757bb21bdde840503a0c6893"], 0x0}, 0x0) 5.133759492s ago: executing program 2 (id=2543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x3, 0x0, &(0x7f00000004c0)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x107e}, {0xffffffffffffedca, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r2, 0x0, &(0x7f00000c7000/0x1000)=nil, 0x1000, 0x10}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000013c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000014c0)={0x0, 0x36, &(0x7f0000001480)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000f6668576135b3fcb49180089b781f86fbc2db2a1cf97271a5cc351e87e0cfd442817d8cf4f8dd4cf7b9022e4434eb8575f0efd9f0f30b87a01c7f0a0e0b8e846436c776c5a89c2845da15a4bb24d426a094de0", @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf25110000003c0001800800030001000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r7, @ANYBLOB="140002006d616376746170300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x14) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r9], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000940)={"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"}) sendmmsg$inet(r3, 0x0, 0x0, 0xf1c) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x8000000001cb, 0x12) 4.652988077s ago: executing program 4 (id=2544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000100000000c1140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) 4.228019821s ago: executing program 4 (id=2545): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r4, @ANYRES64=r2], 0x3a) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 2.707004231s ago: executing program 5 (id=2546): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000280)='ramfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='source', &(0x7f00000002c0)="4bc0e7041e7ce2", 0x7) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x1e, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000002340)=ANY=[@ANYRES64, @ANYBLOB], 0x198) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') 2.095677243s ago: executing program 1 (id=2549): getpgid(0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r2, r1, 0x80000) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x0, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001008000c4000000e45400000000c0a01"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x0, 0x1, 0xf2f2, 0x6, 0x0, 0xbeff, 0x0}) close_range(r8, 0xffffffffffffffff, 0x2) r9 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000501, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') getdents64(r12, 0xffffffffffffffff, 0x43) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r13, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1.994619484s ago: executing program 2 (id=2550): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0xa, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xb, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0xfc, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) 1.904902563s ago: executing program 0 (id=2551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0x0, 0xfffb}}}, 0x24}}, 0x0) 1.576369061s ago: executing program 0 (id=2552): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000200)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}, {&(0x7f00000002c0)="a455c31b526e3d8fb95442af2b398ada8803874b4e08c7c6be4ca2bd2b9620bc16d05c50ff668e3054290d423a29ea1196dd1228cd2964caa4ccdf71246d25d1d1b25d2a7a47acc44ef8053d50f034878067c369b8c248ae5a3cf2cc400a57be4a2112a131ff68acf1cbbc70974fd5e6b735b199b196f822eb393765fffb96ffb450460c7bc6dd9770a3588aa9f8f23954e9d2d7dd35ca4528d689d017ebfe6d47bd08ef09c8112f13956c14ef8d4b", 0xaf}, {&(0x7f0000000440)="040b34487b8a69a8566204345729e51dcaaeb78918e8263fe8a2fa50840ad99d5ef99cf64e1b97d9812352c5a9d2f15b9b1b5f0eb522453273f0e5564675bb28b1fcdd10766b16c6dad6fb729790cd633ff6c7bb8bd07f23b51038e81cb8018a5b05154125381875dee75deecf65f393626dd303fb28cc8f8b437215b686d3057e74c2a62b2065ef91f3cb8073243c2c1aa70cfbca0356edb4dfd2aea17a4fa0e3778d8282281133", 0xa8}, {&(0x7f0000001b80)="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", 0xfda0}, {&(0x7f0000000500)="74c8aacf41f3f8ca543573ebba5abc32022d88e6c7990b68dbb36676ff8eded6a98931314b99058d3e81d36ecbb4ed52ac8c4d9c41e84f77be2ed5ffd83e0a1d1e4deef9e56440f2d8a56f0703471d15d51befffa2da978ae520c5162ade37380d97708398864c608b41aa4ae2c654f3a67415fc289416713e25635474dc33553ee17a17a2fe40904d57852e60a8f8ad9ab5d2a1411f45f0641a973c92037ea0c3f54fb9b92432888f25d10da5b3fb531e83e085b631740a84a3f85540438109c42d1f4e", 0xc4}], 0x7}, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0xffff, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xdf, 0x2, 0xe000, 0x32315241, [0x6, 0x6], [0x122, 0x9], 0x13a}}) 1.461623471s ago: executing program 0 (id=2553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10005}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000500", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.375400386s ago: executing program 4 (id=2554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = syz_usb_connect$hid(0x466ebb02bdbbaa6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r8, 0x4b3d, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) clock_nanosleep(0x7, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) 1.200409613s ago: executing program 0 (id=2555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000b00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.156645565s ago: executing program 0 (id=2556): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="19718f3d240000005043b5c7ed4a46be89d283b62d1fee60d46ec7c45b9f1f6affc0fac97ffcedaa797e1bff1ff0b3a0", 0x30) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x3960f000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='\x10\x9cm\'z\x97}\x9d\xa7\xdb\x1f\xd7', 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340), &(0x7f0000000240)=0x8) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000180)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000004400)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000004240)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xfffffffffffffffc, 0x9, 0x4, 0x200040}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7aa, &(0x7f0000000000)={{@local, 0x5}, 0x6, 0x56a4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000640)) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000300)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 1.101309921s ago: executing program 2 (id=2557): pipe2(0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) (async) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4) (async) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pidfd_send_signal(r2, 0x5, &(0x7f0000000140)={0x5, 0x5, 0xfffffffb}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb401020301090212000100000000090483b5cf12f82d82"], 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x3451}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000001580)={r7, 0x1010, "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"}, &(0x7f0000001500)=0xff8f) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, 0x0, 0x40091) (async) read(r0, &(0x7f00000002c0)=""/11, 0xb) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202", @ANYRESOCT], 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0080", @ANYRES16=r9, @ANYBLOB="04002bbd7000ffdbdf252e0000000c009900010100002c0000000800e3800400000004009300"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x800) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r10, 0x0, 0x31, &(0x7f0000000000)=0x4, 0x4) 927.979203ms ago: executing program 2 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x20000000000002f) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000004f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004f40)={&(0x7f0000001780)={0x37a0, 0xd, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2000, 0x3, 0x0, 0x1, [{0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_USERDATA={0xe5, 0x6, 0x1, 0x0, "b02d67c772930b1274108988d0d0322d6886ccf77dc8f1df00167d6b2053a5d05759a4ed62dabf76cd82023cc3ffd4afff227bb8591f8f09eefd8e709677a7fd71a0f853302d480a69cc8b8fc38f9d7b0240998a3dfb815d4247dc2eff45a0eedfb96152b291a2b336846012a91a4184f5a8c345ea16571cd45c9e8946c1cc212f4b8cd12f3b9236c074f215c66841bd0550cffa06af49bdfabfcccc766c1d5eca1fbdb2c8e2148e91de3d6bffbc2a37853cb83fcc5b8f03bf0d7fef0c23f4eb0e088ba66f38ac1d271600c5ba619a315e441c9019150019ccfe91747c04000fb4"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_KEY={0x218, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x47, 0x1, "9f5f4f16a8e79e26a060a2c8d5f79144f1062e071e8856b6b134db56242d72e4ea8baf91b007200c2527073b51ec050be1a8cc1e96e8c315d01e885d4f8f302cb0cb88"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2b15e4a2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "07d3"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x157fe110e8ac4337}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "2540a1791b0925f10d5a44ad42d9f81d636c197db96b1f1a847d73ed980b84781ba94baab78da8a0c650a23f772fc2b46c5eb6bb5a68c8b82466b99273e26ad8cf62dfbe4cb65ba8b5"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "8026fcc8e2d73245d2b53b9cb199b1e8507dafe84b5c61fb0625d0e1da76da2ed6c68f70ceff5ef706331ad5ff45627bb12488eddb752adb51e062ab0504416dc7a8973ddb3392fce0be765cef74f4197839f89757d57a51fdc024b88d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xc8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x80, 0x1, "d66759318bbab8a4ce8b4a2e7a099a4ab2972a9aca8dbf38a43c550b1f62b5fd21761ad5f8773f2fc9020e14199791f9811de271754966af06705dde105d39b954c997e85f004235fb5e1f218be87158885b0f2fce420501883d0a6d92b53002701a2ec734f8cd3cad396871e38bf3918415f74acae26f02568a03be"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, {0x38c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x114, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xd9, 0x3, "62fe031135916f68486a36cbfacd2832fbaddf9ac6701aa46b0afca2b0cf37b7a0343d152d846a9f928cba7c110b45344974e6f39161a8d059252b697ac0ba080aa43e41b4f6d39a66e94a739e6c5b9049de25f7a36552cacb857b4cc1dbd107476828303d248208c220718132154a64a03766efe936ffbb8ae879875b07f047fd695d38023fb965bd138c7f42a4ccc15013339688d478e3f215dacf72747cb8cbc2e30f7437d86fef01b1b16ba2535f59866598e13560a39f38b2a2723b676ca66ef82449f3ac0d0d9fbba1e5f547dce5e252ee1a"}, @NFTA_MATCH_INFO={0x18, 0x3, "662d41b9927f3d0c0ab80ede1aeef0a943706514"}, @NFTA_MATCH_NAME={0xa, 0x1, 'state\x00'}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x24c, 0xb, 0x0, 0x1, [{0x1f4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1e4, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0xec, 0x3, "60222f52af6846b93b1a5adcf38df6cb397b5890f1a00f1fb053150dde0f2d3eddd3f49692cd25c5bad539d79d1cebe693a3deeb09c27926da519de5788b708155203a68e698bee3bfd8de58a02ef518f1a60d45afec8d951a8c5663ebebdec056c078b438fd343c857095f2d3a1bb5b4fa400db7e041a484264237041cafcaefe903bd1017d490fdc2c8f31038ecdf8667fee0a2c2e2aa3133e7ea2ec14b195f31b47070ae4d2c9962fb1d4c0477104d7f4bc18825fd3343702e92972b599fa466a4706ea2bb6475fff25dd6d3e2576b9f1168672f1b17b6d65121e43f63f8c93cf0f875776fac6"}, @NFTA_TARGET_INFO={0xd6, 0x3, "15987ff8c13d6eef01e67aae0a3a85ead77a3a1881264cd91e8959450efc6fa5eeb9fd44791644109dcb90adf0bcdbf79e2b5ca8e3a1fa286c0aedd98510babdaaf3aef87760a08e70d594f18cd90cda32186afd437077c43f8a312086e6595e7f02e3fdf1938e110238a37ae0e8fcde6fa90ec541742efa602b02761d9f4111e38126a88b433ab34af5185778dc5bfbd2f97fd2acc2fbf0854d5d8dc9c4a8a8b9e6e4fe4cc6b97a04a417cd738c9a61c7d03820e4ac1db9ae6d47dfffceb61faa396a6cfe391de4b4443e12e87d97a357e6"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, {0x10f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "b4a369391c661850c95e6b2bffcf4398ee8374f10da09404d502404fc351efa6ccffad533f933ff99a2578966f0a409fa48bc05cc09b4fbb694606132170e0e7cd1d0e110dfd6b9546df24124fa0fc"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "00f9e3213737522139b4d305bb1e52fea78a3c8ce2b0337c53a3fafba30dad864c0b6b780f6489adab5412f76f5a195fc9ef58702b5250d1a5d5ef572e0bb12bd9759365da6999357356b8eeaf087951b5c26475940e014c6a7435b89d2aa29708aab3bee91ad09713a28e178aa43ec7835081b272c0f5145ce9860f5097d49169d14fd71ac8e96d2d5dee1d7f655592191d39d4ddf941861f3aca9745862736a45e87396d49fe7026631c0e7ca35a4f43249d2994b1999f5beb43ba32cb141e06510808505a814708e904273eb95962feb8cb7adfac81350df6572a3bef2c5e4b63e0ce357ac400488025e2cb9fcf1a0d0bf8b2f54361b0013f5ddd23f22a39887eb8bb948ff8d7503f173d85fc9d1507a984275beb814839902cb060b6f14c7e7937ff88d23681dae06dbfa34cc7936b4a57313289692dc478c89e92d122ea98ead3058ee400bd1885d5be0d4eb6ea954574cd82bf1edd73853e3585535f5f8d6527108fc81f4023f4d6786975781cc7b0b89bfe87e8f919da0e5a63f007ae32e94ea5d79f538d86102b7d10e67d2eddc7a1d59e86a51075474caf25cc4322397730e902f52cb3d2ae643f9fe24866a25b5e7654bdfea1d95f7f8327cd6db8bb6f236d6c2da01d144cf9e44f36a1165f56145af7f72780f55b28976738537fda9527d6ba7f500cf66ab6f37af65972655e8450ae1c47e20e5a8d234e61e6ae3e1f5b99aeca0ea003ff963253169cd35eefd3ebcfd2a9095668c313ecf44c5e6a21e8a238bb6486128abf42aaa69757e9dc37ee85fde99720d652ae0fbb76d69a8ab18a91abe72eabb99edc59224bdb61df50689e3933c9b7b5c8c078a22eb6e47866ac05d4e05792478af954d85206eacaf109c1c24472e41ef0798616fbc5283229c7ff8734934e2bd27eb57c50d19d8a597af72870f86375675a89c21156a4702c7c3f37bb18662e36fcb79f1df8e59eecc4f8034297270866016a417a5111561a489025551244687609286595f0093d21952d6242fc079a5c4a7b23c80be8af2e2e23e16554dee379a8fdbcca6d9d146905cffc056f47c001fc79a12dfdd1ec98f299ad8d6e452b680ac6a8b12ad3dc48f04a4869698b47b9c9fe6735a32467f82346501ab1f25b9001cd46564a16369cc74eb9f1717c6ab5fa32d605e3bac9ab6c6849fd321746b91e4eded583e1933ca7cef35be86d0897c2ce845bd359199ae5f797118409cff24dbd16b7355f699fc297871c1ae8bff8ebb04624d18021ca79dcf7441e5251dd93c54da9661080645c5169b5f80c16ca654fd867e8bc7190e75ef8e6897d383475a83fada79c193daf3b5d152f9da564bb5017ffaa5e0cae7b8d1744658cfd81cf76e35e4102c9f118cf791f6eec53c3d9fa2f14c7d957e2f93581efc80c32186d30f952a5d38a85ccb5c8f1da9c2b929f7440df04e4cdfd6bfafcafd81dab00a1dfc208cf592f63edb0984e67cdc4ae90d833616d9af749b51dea667eb6852b0800a07e95fa38c2ef1b6dd10f0d1af3f73a21c531e03e0c57479ec6e7db335d2ff18b486a423f195a89b02b0c8ca56a0780358d14a33d2ceb71dc935fe8043aebd86b57bac32d056ab7a0a067eccce3df4109742257470bd87efc0d2fa4a701a291479d0daeb70f4f77c68e64f5a500ed4e3b2344f0c20af607399760b2abf324879ab3c8c80cd92e2191c29e3f46f9ad17d7f6911f02c543841cb5a777289fb993a31de9754f166f3ed18928847c7707e671a887742b91f19f030c6d9abfd179564a01b15232d2da22a679523e748da22f424ff6150006c40471e05809d227493e9139c4a2d192f56f3c94d6e084ac6ae2591419267377f31205aa93d044cdd7f66d246aaabb8c771860e66d1813cfa72cc8ab66442867e5d180c2b0f286c3f0b4048e62454943dc534d0e0ea8dd30d7d11e881957db32b307171e7138f5af30b0326060f1ec2e7733db461fa6a2cd39520e0f7c21bb514bbbd15292c37cceb02597548b58f40f5991706d8a9a5aa23378962b58d65924789875f8a6abaec44fcb24bf05d72d69d8e9632205694a6dc1a9e36d0de263f2d1c53216cb6d3293b6c3cf0d56fabfc55dcaa1369d666f134fffb8749e0b3fc9f36782f0dc7a620f3d558fd8b907d988e25a55fc198465242051bd33bd23e21a30d20830f78b72ea35e2dceaeb1053af42211aa17efd6e8e78603d3c97d1514c1f0cb3a220d46154234d419b16e3178b466c317497e6931ec7060a34fdc28cb5c2f80728f3a0318000a07e6d7ff1c9f51dadc25b5edb852537319409722f43b53ed903252cb9a87e0f99daeee249bac8e24b567eec35e6858764119ffa583ba14c629a59fda4d1abcdd9d1a309b5e4ab6cb88ce160adb67408d1eac934c9654b57f8585849bef78a93bfc1016d97efb3ae29c481854b15b54484593962430418dab57cc20a09a335462d019d303ae7cda972659a02985111d4bf38f1649e05974359d7d1db456811a5969cc522551b8f41b9f6e7e5817a4f5e7978d4c87b12cf8f1cf1b5aec4778aacbb0586fbcafc113bc294a66f3d841f010dd86d09eed696345ed7c118a79c27221b7e26b2e7e7c18bf096dc269c4b693a95f6c8104274082b4a799f0f57b80c751208bc87309466d769725a66682dd3af42f075837ff78efa8e8e1a643103ce64c96a59ac43c139257b6dd906b066136069aef31455c0aedbe8f6e94e3003bd7cf5887c49b6e4b3baac490772107379d7968538e7321cc97cec7b3cd4e670a6290d5f4d0e7d0c429fa406660026eecf5bb248db5848c9a3bbc54735b97bfb466577e4ba2a4e717c4cb6fb9b69acd7dc88543c7dbfeb8b32887bc4f85d7e6602366c14c34a58ae5e29b3c7626b36e79c8a3cc1f59c7b799427b6b29c929345c91a82387eacf6e4eab8f23ef71ef9323933902813685ebcced66dd86014a1d03ae3d11a2f68c9b33361d595742888baec27da8f1c32f1b0da280ee1725688ac88beca6dafd0eaca576280469323747bd95e3245c6df694bc538e0996ae6d95263b58b2cdc85d72e39af142f0c18d2bf7b2fa105012afd90e146d81d8dad67058961a204c4d62ce1071a0c5d8dd0e24fcbc48629863ed56ca7acc2d43da7a390731955030429b12739773e47d918590ca8d8bd17d27c52334a1ba2ca3220a9a4fe6936a02a241310acee1143336ba00183aa7716df1266f0bddee70ff83f3b57a5b65af74632a396f8eb155d24a513f36fd42135488cb0a40556810b102063c07b5b4b3d2f8c8c2f28bdec3738e8a7498a4e74bc9bc1b10fbfa035b54801c22e7867342d594d4f2c66403c08dbf865b3a5fa1bc37ecd6d61f78d38a671b9919a6083c4a0b1724d80f2941ef6c6f4d0d70a01379e362ae2b959735436f5579bfe289463b94190dc7b8688cd8708a86af854708ef936ca5b6e629887d648b3b5fae197aec8b7e912be1cd2dcb5442af8d03f1e576b15064a340c5294ac6ce489eec4ddcd42b1b7d33c44101e1d3ba5d47740b60acb8783213f22c80559ac0a1b2770714217c3153e8b58c6897cd0e386bc05671729b57fe5c1eb95e4fb91646e5e7d7833f35f95f719ab6a28ee8209b3b42f3b3b92df784f6d13e46651310b16ba1c7c346e44c699f244aa5de80c360e321c2da3279677562feaed0422f1b3e3edae01322ee7ea332d5c759cd01ef5d89fb7cca3b1ed45d982b4e2053465595f68ea120fdf0dd77bcc8aaa559a12a7a12d259d45b93c2dece1a8a847bb885a399af28d39b54a2c0fcd724cb14c54ee8ad432b8bc7621a04daa51f4612d9ba979a5dc258abd61007e8fcf382efbfed06ea121bc26cbfaa99aece72ab34e0bcdd6818f098c073bffd1a1978d9827cfe060624df72393211b02987524a9890314f8372ccbe3e6505eb25aef36f712727fca965712764441c0a51fd131e4162a38e8101da76cdc00e161eddcf8f272cc73b33a2303a2ba3135019ec56d3e6596259a26cd853f3fbc91a089e4512c406a8a18be92d99406eb96f9e40ee7749008b5db0d9c52cecd4baa88031dfb30388d92b56798251812404ddaf10c43859510594d7e5511c4eae491dcd26ec93f2ada784cce3c0b47586cbe7c81230cb665ba75681c8870da7445c85d149e95df7fa330a3c4e86649d477fb3cce6da801fa4d161d023b66e616c471ccb4ea8efc3c26015d1ea0f8e8098acf61751c07df9fb5906bcf24e55cd83d482a8c8106207a42dca5e082c6a8c2321db92b15ecc38e7f6adf89f6b1b06424fd96892142abb2316e0d4ca8bac519b0abcc15f3760c40c62779ac2d06da2e2d537fc1f2ade628412209282f751281e34b166d3f71a45e5755627817f0465371057246afe48a790a6a9cdadcd850c6c2ddd1c251eaabd94b85b2882fd5f0571b2a2152aa976345738e71e074b37c834d316b749802f7c29dfcf033dfcc1878a83766865b3431079ec30d7cb990a4a46233ffefb6d51b7035f133694b707a8c1e05b0c12b80f4c39cc9a8844a2c9871ec9cf74701a3b7d133871e52c61b9530beab299844097920f025b6d4cfdf18d45c9ef38196efc3629685694730afd7f6e1069beb2072a2f14756bd906c699f9906292ad234c8c1a9d47c76986ebc7cf3ef42ea2c77c638177c093f1241b328d20571a7e77e8270475caa13e9723277261a2f3a9b4d21720b1135c99b6854d1d5d7c74066eca5fcf2f617a49832bb7d4d81b4edaefad899743fb7b7b0703b84676e749ee76a586d8d8e03a2c9a6bfbea0247438c0f849fd1d58151c0a9aa6193217c14af3838eae8d7d5b9f8f88e1907c65ae1e486d8b74c3365036143782864aaeaad62cf39a99c82d38eadb01f8cf603503bce441e31585fa4dafc542df77662218e9bea8a011fc7877d644d718f9e31b749f154332dc4463e8efb678de2dd57e999c35dbc99e89793da30be693c9fc653870624ad5199edbe353a652780743b45d88bff8d6d75d66af73460147dee461633ec968144765d978415fffb791f3ef2b1057d479c1852e990c7a7827c9ec43d12592767bbf9648b9c9b3e25a3b02f57ba457a22cc1279b7c04ee81c42d0e1e0253c26c0d1f3fce9cf8265fda7eaf6b3bdf029abe6618df1f40ad61209fa86504febf2a160b9ffb9b4f4b836bd96f4cf0892b370589c445d2c14a1075d4478697833ca169b7efb08784ce049a6373c77b1c5eb912eacb1898c94e057dd6f84f20f085107d14a433ca12c7b351bf923d06c50dceecbc600aadd6df9a33369290446a94550be5848bea584bf8539c471587e938183af47941541cce829156d50de41ff7690dd13c4d87b95d9c8a382c306428273766464f8f0e4c9f17cd052649641eb440ec9974260e34bd7299b9ca8159ab3f6d1fe57bedf8ca077a94e8509e18c455614d99b1abe46edb5a91fb258b3752bc8139dd551bb200fa63b9501c099167c4c9451d087e590d7158205d343848d5888a2eb6f4bc453466e2dbce6ef2556757c9d3d5e3221e31826089f3a51a0dec7c429b5d67490f85c17dfb92f39e868bd74daa119af90f6e2a9ee14bac0fc7fd6fe19e5bae06541fb68a81e8e427b52a173752862a83d049398989e5446ded085ade7e0ba2a7d693b98772f1e30675c7be57cc0a147627b77186b4664e54da38ee23039963e02b79e02c88cf01f634cf56c48cfe2aca7769535109db047fe310139202d5fe753763bb566cea6e2fec48690a4ceb419d3fd38f7e8e33283f3323c65551e912ecfd530bd56c7dd43f206fee7149644964dcae42e5a76966e93b"}, @NFTA_DATA_VALUE={0x17, 0x1, "ee4ff0546f238e615efc999d929bd7b8396f59"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x23c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "ab828e847b47df334dce4c5836e7efcdce516616c3b99e13b7547fc46068eea9d57b8a5f55620fa932070bb3e346f877b489f99e0a1a84006374224ca829cadceed9dce70ccd4ff8b66c6e192dca479f9c484edf5b418688fef9059e3cb451e460dc241da5e5a5222904759ea598eb7d6c9eb6a0762575d32e74a9c72c7e1d1427908c1d07d3fc3aaf40fd5a5c1dc5ba83eeb25cfe6303f8c81580ab0eef2e1def1988a79a158dfe54a0d1798d609be1354702c7e6f7857d254640a7883128c8c1cbb15c377aeac6316dada924fe770e607e2a54"}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x54, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x2d}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x3c}]}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}]}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "7b410632d6b7ab4447103156f7"}, @NFTA_DATA_VALUE={0x13, 0x1, "5b8e8b676a3107694f2644a8b8b7dc"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd2}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x234, 0xb, 0x0, 0x1, [{0x10c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xfc, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf5, 0x3, "b7db9a8d9b26db56441d0a33ab4b9b9d337b899696f46f7f644c9a47f699eac812629759abf10f871835b4494cce9286004d422f19579ac94c038d14cb89b8f9b3559fdcc34e3a5a50e5f5f0ef4f545d78e20b0456601a888505aaebd6da9fe844ea74467659ecc2b62e098223ba4aff9f861d3ce9002efe2ee44eae000f19c09f16fe072acacd93aef6a4506a5593351ff50479f2129ae62591d5a5492561ed326e5b90abf493370b1c4ab3af6c127ce19d6d13fc8fc72af70aa6d1f004ade16b2c024796b7b3142d849f756d4cbb6c8505846bda80cee61e23821f1784720504a4fe67410314d4a1963055fee1173505"}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x50, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x23}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x11}]}}}, {0x5c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x46, 0x3, "8a6d5e127bb09abe98071a56a84b8325626f1ce1ad27bb0c1c1707e58fd92ac9ea8b1814aa985c4785bbf4723dd8ee3af56c85e2c907aae192ce03a32a8057954d93"}]}}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1760, 0x3, 0x0, 0x1, [{0x1cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "ec6abc04ef2597826be1a11c85fd1b2a51d8edf3d55c0b2871"}]}]}, {0x11e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "96827d1106b9e91950fab4983cfbc902a35c059c4fccfb2948c21b0ad4"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1184, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "8a55581086bcfc9d95a297e8d1bd13e6358d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "600ffd7c404e50da9a98b3023e925d33e89ab6129b520b4daf7bc075160a44d74a3185158de649daef995ba219e482e6e187"}, @NFTA_DATA_VALUE={0xbb, 0x1, "d53ed8ff34ed117b3b9af193b6fd715ad87702a98b5ee896f6959e2e44c07bf80cb5e95c8113c0afa41bdc8f0005fa9f3b92788e8fabe75b7274333a103a1d6ec4ee5d9188fa8d5afc5bea0a19ee041359f804a73a423689e29500dbe7170cafa18a529f802d60b5a46797c15ec9920ec71796b3d24381680a914931d547c70bd877bf9df5df1ac1595fc26a03bdbea954234c905561f79f7efe810b365e4ccae53a07b440a4fd0f7f4cf11a518cefab8f9b74612a958e"}, @NFTA_DATA_VALUE={0x48, 0x1, "ba2953abb3b904c25bbcbc60c1dd4187439453dfa049b9694fc54a56cc037b8d705fcbe725718ddf199d21e8ee4bda8d6a6361b21b9eff4774b472e7f4504d74f6298320"}, @NFTA_DATA_VALUE={0x4}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x244, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "edee7ffa03b68570f227ac30f02ac23f519b22b105626a68625ff7ac2bfb7f47eaedb1149ff47eef5cc1763ff1a9051a8d4a2fc7116306b15c4e354d78b83339cefc4161b63b74b23665fb0d03bf4c3b38a53ba659cfec268b3a36a70296841ff7688d7311975122e40c5ccf73ab4c8fe77a9ce6c31d5aac3405a1ca3898082bcdae91e5ea0632c7a0aa57e87552cba83b026e24ea12376f10a40d9b1b1fd486878df54f8821f859715a6a6f98a04e5202fe743acc39b8da05494b6773d72b7edcfa5e2e678e41480ee47059f22d6930549e97bb2e0f3ca7f1cfcc883eacd1c985660a3996be36"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "2a12245a91c052fe59f596da6fbcfb40f7a39b7121083e9e01dd53cef2afffb9c9dda856a00fed0ccec3698788f251a792ea9ef23e36010d32c1e6171dad504e929d404d941123b06dcf3683eaad91cf99f2df1291c5b1d78973f491d274df9dae92339a9561db143e96ebfb0ee0cf36a5255182dfe64d89f9091952780f8a518f26bab440742e0e8fa28fa7517d21516dc8fc04c8c6f568f0"}, @NFTA_DATA_VALUE={0x42, 0x1, "fd9199e89cf6cf471f9be04909b79255d188ad183329eafe056fa54d9b7a71fd83333fe174975e02f1489bcf03cc1c31946d8c7bc676d7d3f4e13e3dd9de"}]}, @NFTA_SET_ELEM_KEY={0xa0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x74}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "3a9e1e8d8db3a0565ebb3458bcdc"}]}]}]}, 0x37a0}, 0x1, 0x0, 0x0, 0x656a1a7f08550cd5}, 0x40810) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000080)=0x7fffffff, 0x4) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, 0x0, &(0x7f0000000440)) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r13, r12, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000140)={0x8001, 0x7a, 0x1, 'queue1\x00', 0x7e7}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000100)={0x3, 'vlan0\x00', {0xe189}, 0x8001}) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 728.119323ms ago: executing program 5 (id=2559): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2004, 0xf7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x1d, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x0, 0x3, 0x505ca08dfd9637d6, {0x28, 0x2, "f70ba381030000200007000000cb5adcc3160fb30d54f300000000000000073f0808ed6c5656"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 631.972781ms ago: executing program 2 (id=2560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x3, 0x0, &(0x7f00000004c0)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x107e}, {0xffffffffffffedca, 0xfffffffffffffff9}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r2, 0x0, &(0x7f00000c7000/0x1000)=nil, 0x1000, 0x10}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x28, 0x4, 0x200000) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000180)={0x200000, {{0xa, 0x4e1f, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0xce24, 0x21, @empty, 0xfffffe01}}}, 0x108) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000013c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf25110000003c0001800800030001000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r8, @ANYBLOB="140002006d616376746170300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$inet(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r10], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, &(0x7f0000000940)={"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"}) sendmmsg$inet(r3, 0x0, 0x0, 0xf1c) 0s ago: executing program 0 (id=2561): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000700)={0x0, 0xabba, 0x400, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000200)=0x8000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kernel console output (not intermixed with test programs): usercopy, interval 1, probability 0, space 0, times 0 [ 585.522441][T13277] CPU: 1 UID: 0 PID: 13277 Comm: syz.5.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.522485][T13277] Tainted: [L]=SOFTLOCKUP [ 585.522495][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.522511][T13277] Call Trace: [ 585.522521][T13277] [ 585.522531][T13277] dump_stack_lvl+0xe8/0x150 [ 585.522572][T13277] should_fail_ex+0x40c/0x560 [ 585.522611][T13277] _copy_to_user+0x31/0xb0 [ 585.522639][T13277] simple_read_from_buffer+0xe1/0x170 [ 585.522680][T13277] proc_fail_nth_read+0x1bb/0x230 [ 585.522730][T13277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.522766][T13277] ? rw_verify_area+0x24a/0x4c0 [ 585.522790][T13277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.522822][T13277] vfs_read+0x213/0xa80 [ 585.522850][T13277] ? __pfx___mutex_lock+0x10/0x10 [ 585.522881][T13277] ? __pfx_vfs_read+0x10/0x10 [ 585.522905][T13277] ? __fget_files+0x2a/0x420 [ 585.522941][T13277] ? __fget_files+0x3a2/0x420 [ 585.522972][T13277] ? __fget_files+0x2a/0x420 [ 585.523012][T13277] ksys_read+0x150/0x270 [ 585.523039][T13277] ? __pfx_ksys_read+0x10/0x10 [ 585.523070][T13277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.523095][T13277] do_syscall_64+0x174/0x580 [ 585.523124][T13277] ? clear_bhb_loop+0x40/0x90 [ 585.523153][T13277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.523175][T13277] RIP: 0033:0x7fa97e35e84e [ 585.523197][T13277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 585.523225][T13277] RSP: 002b:00007fa97f2cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 585.523250][T13277] RAX: ffffffffffffffda RBX: 00007fa97f2d06c0 RCX: 00007fa97e35e84e [ 585.523267][T13277] RDX: 000000000000000f RSI: 00007fa97f2d00a0 RDI: 0000000000000004 [ 585.523282][T13277] RBP: 00007fa97f2d0090 R08: 0000000000000000 R09: 0000000000000000 [ 585.523296][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.523309][T13277] R13: 00007fa97e626038 R14: 00007fa97e625fa0 R15: 00007fa97e74fa48 [ 585.523345][T13277] [ 585.532374][ T7502] usb 2-1: Using ep0 maxpacket: 16 [ 586.000126][ C0] syzkaller0: tun_net_xmit 76 [ 586.062713][ T7502] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 586.074774][ T7502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.129408][ T7502] usb 2-1: config 0 has no interface number 0 [ 586.161183][ T7502] usb 2-1: config 0 interface 216 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 586.176718][ T7502] usb 2-1: config 0 interface 216 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.219819][ T7502] usb 2-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 586.234070][ T7502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.245750][ T7502] usb 2-1: Product: syz [ 586.258376][ T7502] usb 2-1: Manufacturer: syz [ 586.264745][ T7502] usb 2-1: SerialNumber: syz [ 586.321744][ T7502] usb 2-1: config 0 descriptor?? [ 586.355494][ T7502] usb-storage 2-1:0.216: USB Mass Storage device detected [ 586.434428][T12013] f81534a_ctrl 5-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 586.468451][T12013] usb 5-1: USB disconnect, device number 4 [ 586.585629][ T7502] usb 2-1: USB disconnect, device number 113 [ 586.819219][T13287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2153'. [ 586.854930][T13284] netlink: 'syz.4.2151': attribute type 10 has an invalid length. [ 586.966873][T13293] loop3: detected capacity change from 0 to 7 [ 586.978089][T13292] syzkaller0: entered promiscuous mode [ 586.986045][T13293] loop3: p1 p4 [ 586.997204][T13293] loop3: partition table partially beyond EOD, truncated [ 587.011347][T13292] syzkaller0: entered allmulticast mode [ 587.040239][ C0] syzkaller0: tun_net_xmit 76 [ 587.118543][T13298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.143873][T13298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.157367][T10428] udevd[10428]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 587.176851][T10573] udevd[10573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 587.414794][T13307] kvm: pic: non byte read [ 587.420593][T13307] kvm: pic: single mode not supported [ 587.420779][T13307] kvm: pic: level sensitive irq not supported [ 587.431830][T13307] kvm: pic: non byte read [ 587.444287][T13307] kvm: pic: non byte read [ 587.449136][T13307] kvm: pic: non byte read [ 587.455835][T13307] kvm: pic: non byte read [ 587.565203][T13315] syzkaller0: tun_net_xmit 1 [ 587.702948][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 587.730042][ T7502] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 587.865085][ T42] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 587.876944][ T42] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 587.886087][ T42] usb 6-1: Product: syz [ 587.890364][ T7502] usb 5-1: Using ep0 maxpacket: 8 [ 587.897253][ T42] usb 6-1: SerialNumber: syz [ 587.897462][ T7502] usb 5-1: unable to get BOS descriptor or descriptor too short [ 587.912858][ T42] usb 6-1: config 0 descriptor?? [ 587.928248][ T7502] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 587.947039][ T7502] usb 5-1: config 117 has no interface number 0 [ 587.961507][ T7502] usb 5-1: config 117 interface 163 has no altsetting 0 [ 587.981483][ T7502] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 587.997412][ T7502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.018241][ T7502] usb 5-1: Product: syz [ 588.027558][ T7502] usb 5-1: Manufacturer: syz [ 588.037811][ T7502] usb 5-1: SerialNumber: syz [ 588.080160][ C0] syzkaller0: tun_net_xmit 76 [ 588.117882][T13324] syz_tun: entered allmulticast mode [ 588.207514][T13323] syz_tun: left allmulticast mode [ 588.479328][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.494349][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.503708][T13332] syzkaller0: entered promiscuous mode [ 588.510808][T13332] syzkaller0: entered allmulticast mode [ 588.574098][ T42] usb 6-1: Firmware version (0.0) predates our first public release. [ 588.601676][ T42] usb 6-1: Please update to version 0.2 or newer [ 588.654449][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.667912][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.705113][ T42] usb 6-1: USB disconnect, device number 11 [ 589.123965][ C0] syzkaller0: tun_net_xmit 76 [ 589.192498][T13346] syzkaller0: left promiscuous mode [ 589.211180][T13346] syzkaller0: left allmulticast mode [ 589.234641][T13346] FAULT_INJECTION: forcing a failure. [ 589.234641][T13346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.256704][T13346] CPU: 0 UID: 0 PID: 13346 Comm: syz.1.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.256740][T13346] Tainted: [L]=SOFTLOCKUP [ 589.256747][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.256760][T13346] Call Trace: [ 589.256769][T13346] [ 589.256778][T13346] dump_stack_lvl+0xe8/0x150 [ 589.256816][T13346] should_fail_ex+0x40c/0x560 [ 589.256850][T13346] _copy_from_user+0x2d/0xb0 [ 589.256873][T13346] kstrtouint_from_user+0xd6/0x180 [ 589.256904][T13346] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 589.256950][T13346] proc_fail_nth_write+0x8e/0x210 [ 589.256983][T13346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 589.257022][T13346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 589.257060][T13346] vfs_write+0x296/0xba0 [ 589.257090][T13346] ? __pfx_vfs_write+0x10/0x10 [ 589.257114][T13346] ? __fget_files+0x2a/0x420 [ 589.257148][T13346] ? __fget_files+0x3a2/0x420 [ 589.257176][T13346] ? __fget_files+0x2a/0x420 [ 589.257213][T13346] ksys_write+0x150/0x270 [ 589.257238][T13346] ? __pfx_ksys_write+0x10/0x10 [ 589.257268][T13346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.257291][T13346] do_syscall_64+0x174/0x580 [ 589.257318][T13346] ? trace_irq_disable+0x3b/0x140 [ 589.257345][T13346] ? clear_bhb_loop+0x40/0x90 [ 589.257372][T13346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.257393][T13346] RIP: 0033:0x7f2d7855e84e [ 589.257413][T13346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 589.257431][T13346] RSP: 002b:00007f2d7953bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.257454][T13346] RAX: ffffffffffffffda RBX: 00007f2d7953c6c0 RCX: 00007f2d7855e84e [ 589.257471][T13346] RDX: 0000000000000001 RSI: 00007f2d7953c0a0 RDI: 0000000000000006 [ 589.257484][T13346] RBP: 00007f2d7953c090 R08: 0000000000000000 R09: 0000000000000000 [ 589.257509][T13346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.257521][T13346] R13: 00007f2d78826038 R14: 00007f2d78825fa0 R15: 00007f2d7894fa48 [ 589.257553][T13346] [ 589.865072][T13359] netlink: 'syz.5.2176': attribute type 1 has an invalid length. [ 589.989706][T13361] veth3: entered promiscuous mode [ 590.016168][T13361] bond2: (slave veth3): Enslaving as an active interface with a down link [ 590.074291][T13359] bond2: (slave veth5): Enslaving as an active interface with a down link [ 590.085340][T13364] bond2: entered promiscuous mode [ 590.096984][T13364] bond2: entered allmulticast mode [ 590.103377][T13364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.160351][ C0] syzkaller0: tun_net_xmit 76 [ 590.190826][ T42] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 590.362913][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 590.384705][ T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.417909][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.438532][ T42] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 590.478506][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.504852][ T42] usb 2-1: Product: syz [ 590.512085][T13371] syzkaller0: entered promiscuous mode [ 590.531803][T13371] syzkaller0: entered allmulticast mode [ 590.533310][ T42] usb 2-1: Manufacturer: syz [ 590.562190][ T42] usb 2-1: SerialNumber: syz [ 590.622917][ T7502] f81534a_ctrl 5-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 590.643285][ T42] usb 2-1: config 0 descriptor?? [ 590.657511][ T7502] usb 5-1: USB disconnect, device number 5 [ 590.687078][T13378] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2183'. [ 590.934950][ T42] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input81 [ 591.079038][T13393] FAULT_INJECTION: forcing a failure. [ 591.079038][T13393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.097085][T13394] fuse: Bad value for 'fd' [ 591.112533][T13393] CPU: 1 UID: 0 PID: 13393 Comm: syz.0.2188 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.112564][T13393] Tainted: [L]=SOFTLOCKUP [ 591.112575][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.112586][T13393] Call Trace: [ 591.112594][T13393] [ 591.112627][T13393] dump_stack_lvl+0xe8/0x150 [ 591.112655][T13393] should_fail_ex+0x40c/0x560 [ 591.112679][T13393] _copy_from_user+0x2d/0xb0 [ 591.112695][T13393] video_usercopy+0x359/0x1430 [ 591.112835][T13393] ? hook_file_ioctl+0x1f0/0x5f0 [ 591.112860][T13393] ? __pfx___video_do_ioctl+0x10/0x10 [ 591.112892][T13393] ? __pfx_video_usercopy+0x10/0x10 [ 591.112930][T13393] ? __fget_files+0x2a/0x420 [ 591.112968][T13393] ? __fget_files+0x2a/0x420 [ 591.112989][T13393] ? __fget_files+0x3a2/0x420 [ 591.113012][T13393] v4l2_ioctl+0x18d/0x1e0 [ 591.113032][T13393] ? __pfx_v4l2_ioctl+0x10/0x10 [ 591.113052][T13393] __se_sys_ioctl+0xfc/0x170 [ 591.113068][T13393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.113085][T13393] do_syscall_64+0x174/0x580 [ 591.113104][T13393] ? trace_irq_disable+0x3b/0x140 [ 591.113125][T13393] ? clear_bhb_loop+0x40/0x90 [ 591.113144][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.113160][T13393] RIP: 0033:0x7f042eb9e019 [ 591.113174][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.113200][T13393] RSP: 002b:00007f042fae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.113215][T13393] RAX: ffffffffffffffda RBX: 00007f042ee25fa0 RCX: 00007f042eb9e019 [ 591.113225][T13393] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000004 [ 591.113237][T13393] RBP: 00007f042fae6090 R08: 0000000000000000 R09: 0000000000000000 [ 591.113246][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.113255][T13393] R13: 00007f042ee26038 R14: 00007f042ee25fa0 R15: 00007f042ef4fa48 [ 591.113276][T13393] [ 591.200597][ C0] syzkaller0: tun_net_xmit 76 [ 591.390621][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 591.392012][ T42] rc_core: IR keymap rc-imon-pad not found [ 591.404819][ T42] Registered IR keymap rc-empty [ 591.409954][ T42] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 591.444366][ T42] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 591.482433][ T42] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 591.507857][ T42] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input82 [ 591.551034][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 591.577254][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 591.595874][ T42] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:114> initialized [ 591.621925][ T10] usb 5-1: config 0 has no interfaces? [ 591.644726][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.674073][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.704443][ T10] usb 5-1: Product: syz [ 591.726863][ T10] usb 5-1: Manufacturer: syz [ 591.745468][ T10] usb 5-1: SerialNumber: syz [ 591.770772][T12013] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 591.787048][ T10] usb 5-1: config 0 descriptor?? [ 591.898004][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.941868][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.954494][T12013] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 592.017840][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 592.043735][T12013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.053111][ T5791] usb 2-1: USB disconnect, device number 114 [ 592.088295][ T5694] usb 5-1: USB disconnect, device number 6 [ 592.172586][T12013] usb 1-1: config 0 descriptor?? [ 592.206274][T12013] cp210x 1-1:0.0: cp210x converter detected [ 592.239999][ C0] syzkaller0: tun_net_xmit 76 [ 592.469946][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 592.624029][T12013] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 592.630163][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 592.658032][T12013] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 592.682361][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 592.708576][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.746439][T12013] usb 1-1: cp210x converter now attached to ttyUSB0 [ 592.762552][ T10] usb 6-1: config 0 descriptor?? [ 592.795399][T12013] usb 1-1: USB disconnect, device number 12 [ 592.847276][T13414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2195'. [ 592.871969][T12013] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 592.902338][T12013] cp210x 1-1:0.0: device disconnected [ 592.979103][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 593.008220][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.020493][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.031635][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 593.038861][ T10] usb 6-1: media controller created [ 593.050430][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.051682][ T42] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 593.076133][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.095459][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.107174][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.125574][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 593.125590][ T29] audit: type=1326 audit(1785725537.999:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.4.2197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x0 [ 593.158277][ T29] audit: type=1326 audit(1785725538.029:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13418 comm="syz.4.2197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x0 [ 593.184526][ T10] az6027: usb out operation failed. (-71) [ 593.198615][ T10] az6027: usb out operation failed. (-71) [ 593.204809][ T10] stb0899_attach: Driver disabled by Kconfig [ 593.211224][ T10] az6027: no front-end attached [ 593.211224][ T10] [ 593.218727][ T10] az6027: usb out operation failed. (-71) [ 593.227210][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 593.239508][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input83 [ 593.253421][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.279382][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.280364][ C0] syzkaller0: tun_net_xmit 76 [ 593.299145][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 593.314310][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.318556][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 593.340744][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.359374][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.375777][ T10] usb 6-1: USB disconnect, device number 12 [ 593.382943][ T42] usb 2-1: config 0 descriptor?? [ 593.450839][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 593.934589][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.946954][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.976976][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 594.002679][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 594.043451][ T42] usb 2-1: USB disconnect, device number 115 [ 594.229874][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 594.259426][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.275791][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.320015][ C0] syzkaller0: tun_net_xmit 76 [ 594.440459][T12013] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 594.600465][T12013] usb 1-1: Using ep0 maxpacket: 32 [ 594.607895][T12013] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 594.610162][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 594.629335][T12013] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 594.643961][T12013] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.651191][T12013] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 594.661013][T12013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.672136][T12013] usb 1-1: config 0 descriptor?? [ 594.769944][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 594.779071][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 594.787716][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.798888][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.810285][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.820766][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.834220][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.843403][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.060056][ T10] usb 6-1: usb_control_msg returned -32 [ 595.073933][ T10] usbtmc 6-1:16.0: can't read capabilities [ 595.359986][ C0] syzkaller0: tun_net_xmit 76 [ 595.425091][T13455] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 595.464096][T13455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.483640][T13455] vlan2: entered allmulticast mode [ 595.488990][T13455] bond4: entered allmulticast mode [ 595.512752][T13455] bond4: (slave geneve1): making interface the new active one [ 595.529684][T13455] geneve1: entered allmulticast mode [ 595.544050][T13455] bond4: (slave geneve1): Enslaving as an active interface with an up link [ 595.560592][T12474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.572969][T12474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.586365][T12474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.597800][T12474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.692045][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 596.310776][ T42] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 596.350274][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 596.384202][T13475] syzkaller0: entered promiscuous mode [ 596.389798][T13475] syzkaller0: entered allmulticast mode [ 596.400015][ C0] syzkaller0: tun_net_xmit 76 [ 596.480598][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 596.492203][ T10] usb 5-1: device descriptor read/64, error -71 [ 596.492504][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 596.506835][ T42] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 596.517428][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.532202][ T42] usb 2-1: config 0 descriptor?? [ 596.581405][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.597497][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.602475][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.614609][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.624981][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.636084][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.733257][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.743296][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.756057][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.760453][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 596.775415][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.899995][ T10] usb 5-1: device descriptor read/64, error -71 [ 596.959479][ T42] cypress 0003:04B4:DE61.0014: unknown main item tag 0x7 [ 596.968173][ T42] cypress 0003:04B4:DE61.0014: unknown main item tag 0x0 [ 596.977324][ T42] cypress 0003:04B4:DE61.0014: unknown main item tag 0x1 [ 596.985044][ T42] cypress 0003:04B4:DE61.0014: unknown main item tag 0x7 [ 596.998289][ T42] cypress 0003:04B4:DE61.0014: hidraw0: USB HID v0.77 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 597.010780][ T10] usb usb5-port1: attempt power cycle [ 597.207644][T13468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.218064][T13468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.232589][ T5724] usb 2-1: USB disconnect, device number 116 [ 597.278191][T12013] usbhid 1-1:0.0: can't add hid device: -71 [ 597.309068][T12013] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 597.349337][T12013] usb 1-1: USB disconnect, device number 13 [ 597.363564][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 597.421731][ T10] usb 5-1: device descriptor read/8, error -71 [ 597.439994][ C0] syzkaller0: tun_net_xmit 76 [ 597.456482][ T7502] usb 6-1: USB disconnect, device number 13 [ 597.482307][T13489] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2219'. [ 597.500746][T13490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.629211][T13495] syzkaller0: entered promiscuous mode [ 597.637344][T13495] syzkaller0: entered allmulticast mode [ 597.680198][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 597.716406][ T10] usb 5-1: device descriptor read/8, error -71 [ 597.840803][ T10] usb usb5-port1: unable to enumerate USB device [ 597.956217][T13505] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 598.034095][T13509] syzkaller0: entered promiscuous mode [ 598.050735][T13509] syzkaller0: entered allmulticast mode [ 598.480057][ C0] syzkaller0: tun_net_xmit 76 [ 598.513412][T13531] loop2: detected capacity change from 0 to 7 [ 598.521100][T13531] Dev loop2: unable to read RDB block 7 [ 598.526895][T13531] loop2: unable to read partition table [ 598.533312][T13531] loop2: partition table beyond EOD, truncated [ 598.540463][T13531] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 598.685406][T13535] syzkaller0: entered promiscuous mode [ 598.694994][T13535] syzkaller0: entered allmulticast mode [ 599.233723][T13552] netlink: 'syz.5.2241': attribute type 1 has an invalid length. [ 599.313763][T13552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 599.397731][T13556] bond3: (slave geneve2): making interface the new active one [ 599.437267][T13556] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 599.490043][T12471] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.520005][ C0] syzkaller0: tun_net_xmit 76 [ 599.528606][T12471] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.548703][T12471] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.569236][T12471] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.608572][T13563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2243'. [ 599.660002][ T10] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 599.749944][ T5727] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 599.820225][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 599.903898][ T5727] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 599.913222][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.921738][ T5727] usb 5-1: Product: syz [ 599.926105][ T5727] usb 5-1: Manufacturer: syz [ 599.930803][ T5727] usb 5-1: SerialNumber: syz [ 599.950353][ T10] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 600.070876][ T42] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 600.099989][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 600.105758][ T10] usb usb1-port1: attempt power cycle [ 600.120557][T12013] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 600.230424][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 600.237616][ T42] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 600.248919][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.255997][ T42] usb 2-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 600.265829][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.277512][ T42] usb 2-1: config 0 descriptor?? [ 600.294098][T12013] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.308904][T12013] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 600.321498][T12013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.330972][T12013] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 600.340670][T12013] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 600.349021][T12013] usb 6-1: Product: syz [ 600.351651][ T5727] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 600.357334][T12013] usb 6-1: Manufacturer: syz [ 600.367216][ T5727] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 600.372205][T12013] usb 6-1: SerialNumber: syz [ 600.389612][T12013] usb 6-1: config 0 descriptor?? [ 600.404162][T12013] usb 6-1: selecting invalid altsetting 0 [ 600.450283][ T10] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 600.470847][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 600.560018][ C0] syzkaller0: tun_net_xmit 76 [ 600.607176][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 600.616766][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.632740][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.668692][ T5694] usb 6-1: USB disconnect, device number 14 [ 600.674712][ T10] usb 1-1: Invalid ep0 maxpacket: 64 [ 600.691440][ T5727] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 600.691498][ T5727] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 600.696350][ T10] usb usb1-port1: unable to enumerate USB device [ 600.748493][ T5727] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 600.760701][ T5727] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 600.776120][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 600.776224][ T42] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 600.804205][ T42] usb 2-1: USB disconnect, device number 117 [ 600.939374][T12013] usb 5-1: USB disconnect, device number 11 [ 601.220745][ T5694] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 601.392075][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.431404][ T5694] usb 6-1: not running at top speed; connect to a high speed hub [ 601.449025][ T5694] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 601.461033][ T5694] usb 6-1: can't read configurations, error -61 [ 601.517523][T13587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.610836][ T5694] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 601.815099][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.894839][ T5694] usb 6-1: not running at top speed; connect to a high speed hub [ 602.002891][ T5694] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 602.082641][ T5694] usb 6-1: can't read configurations, error -61 [ 602.129737][ T5694] usb usb6-port1: attempt power cycle [ 602.389433][T13598] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2251'. [ 602.437540][T13598] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2251'. [ 602.530574][ T5694] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 602.583791][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 602.634527][ T5694] usb 6-1: not running at top speed; connect to a high speed hub [ 602.690791][ T5694] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 602.727093][ T5694] usb 6-1: can't read configurations, error -61 [ 602.878962][T13611] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 602.899503][ T5694] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 602.967984][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 603.023191][ T5694] usb 6-1: not running at top speed; connect to a high speed hub [ 603.056772][ T5694] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 603.107278][ T5694] usb 6-1: can't read configurations, error -61 [ 603.138326][ T5694] usb usb6-port1: unable to enumerate USB device [ 603.239926][ T5727] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 603.419940][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 603.497207][ T5727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 603.537240][ T5727] usb 5-1: too many configurations: 80, using maximum allowed: 8 [ 603.576038][ T5727] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 603.595475][ T5727] usb 5-1: can't read configurations, error -71 [ 604.097396][T13626] syzkaller0: entered promiscuous mode [ 604.121986][T13626] syzkaller0: entered allmulticast mode [ 604.299543][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 604.360141][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2261'. [ 604.404453][T13631] netlink: 'syz.0.2261': attribute type 32 has an invalid length. [ 604.457693][T13631] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2261'. [ 604.654300][T13640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2264'. [ 605.049598][T13652] syzkaller0: left promiscuous mode [ 605.076471][T13652] syzkaller0: left allmulticast mode [ 606.233094][T13667] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 606.267966][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2273'. [ 606.381981][T13670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.424163][T13670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.520584][T13670] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 607.266595][T13685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2277'. [ 607.589537][T13696] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2281'. [ 607.814403][T13692] "syz.2.2280" (13692) uses obsolete ecb(arc4) skcipher [ 607.913773][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888068c71400: rx timeout, send abort [ 608.040130][ T5694] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 608.190722][ T5694] usb 1-1: device descriptor read/64, error -71 [ 608.197053][T13713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 608.265680][T13713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.299344][T13713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.414212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807aac7400: rx timeout, send abort [ 608.424776][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888068c71400: abort rx timeout. Force session deactivation [ 608.500101][ T5694] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 608.661552][ T5694] usb 1-1: device descriptor read/64, error -71 [ 608.790351][ T5694] usb usb1-port1: attempt power cycle [ 608.922597][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807aac7400: abort rx timeout. Force session deactivation [ 609.173320][ T5694] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 609.212809][T13729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2291'. [ 609.230042][T12013] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 609.260664][ T5694] usb 1-1: device descriptor read/8, error -71 [ 609.441218][T12013] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 609.481369][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.520015][ T5694] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 609.529079][T12013] usb 6-1: Product: syz [ 609.545628][T12013] usb 6-1: Manufacturer: syz [ 609.565835][T12013] usb 6-1: SerialNumber: syz [ 609.604338][T12013] usb 6-1: config 0 descriptor?? [ 609.630606][ T5694] usb 1-1: device descriptor read/8, error -71 [ 609.787146][ T5694] usb usb1-port1: unable to enumerate USB device [ 609.856404][T12013] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 609.897334][T12013] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 610.051747][T12013] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 610.111291][T13734] 0: reclassify loop, rule prio 0, protocol 03 [ 610.133600][T12013] usb 6-1: USB disconnect, device number 19 [ 610.907065][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 610.973331][T13745] syz_tun: entered allmulticast mode [ 610.998081][T13745] dvmrp8: entered allmulticast mode [ 611.017279][T13744] syz_tun: left allmulticast mode [ 611.300300][ T5694] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 611.422619][T13756] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2301'. [ 611.461996][ T5694] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.485381][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 611.497546][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 611.519563][ T5694] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 611.550477][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.586989][ T5694] usb 1-1: Product: syz [ 611.604432][ T5694] usb 1-1: Manufacturer: syz [ 611.614206][ T5694] usb 1-1: SerialNumber: syz [ 611.650578][ T5694] usb 1-1: config 0 descriptor?? [ 611.677400][T13748] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 611.849959][ T5694] rc_core: IR keymap rc-streamzap not found [ 611.856169][ T5694] Registered IR keymap rc-empty [ 611.865027][ T5694] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 611.890860][ T5694] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input84 [ 611.910986][T12013] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 612.018409][T13763] FAULT_INJECTION: forcing a failure. [ 612.018409][T13763] name failslab, interval 1, probability 0, space 0, times 0 [ 612.072263][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.4.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.072301][T13763] Tainted: [L]=SOFTLOCKUP [ 612.072311][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.072330][T13763] Call Trace: [ 612.072340][T13763] [ 612.072351][T13763] dump_stack_lvl+0xe8/0x150 [ 612.072393][T13763] should_fail_ex+0x40c/0x560 [ 612.072431][T13763] should_failslab+0xa8/0x100 [ 612.072490][T13763] __kmalloc_noprof+0xfe/0x720 [ 612.072522][T13763] ? rcu_is_watching+0x15/0xb0 [ 612.072547][T13763] ? tomoyo_realpath_from_path+0xef/0x640 [ 612.072577][T13763] ? tomoyo_realpath_from_path+0xef/0x640 [ 612.072615][T13763] tomoyo_realpath_from_path+0xef/0x640 [ 612.072656][T13763] ? tomoyo_path_number_perm+0x219/0x5f0 [ 612.072693][T13763] tomoyo_path_number_perm+0x246/0x5f0 [ 612.072734][T13763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.072781][T13763] ? __lock_acquire+0x683/0x2cf0 [ 612.072833][T13763] ? hook_file_ioctl+0x1f0/0x5f0 [ 612.072883][T13763] ? __fget_files+0x2a/0x420 [ 612.072920][T13763] ? __fget_files+0x2a/0x420 [ 612.072959][T13763] ? __fget_files+0x3a2/0x420 [ 612.072992][T13763] ? __fget_files+0x2a/0x420 [ 612.073029][T13763] security_file_ioctl+0xc3/0x2a0 [ 612.073070][T13763] __se_sys_ioctl+0x47/0x170 [ 612.073096][T13763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.073123][T13763] do_syscall_64+0x174/0x580 [ 612.073159][T13763] ? clear_bhb_loop+0x40/0x90 [ 612.073189][T13763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.073215][T13763] RIP: 0033:0x7fe3b759e019 [ 612.073239][T13763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.073260][T13763] RSP: 002b:00007fe3b839f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.073289][T13763] RAX: ffffffffffffffda RBX: 00007fe3b7825fa0 RCX: 00007fe3b759e019 [ 612.073307][T13763] RDX: 00002000000000c0 RSI: 0000000040085507 RDI: 0000000000000003 [ 612.073324][T13763] RBP: 00007fe3b839f090 R08: 0000000000000000 R09: 0000000000000000 [ 612.073340][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.073355][T13763] R13: 00007fe3b7826038 R14: 00007fe3b7825fa0 R15: 00007fe3b794fa48 [ 612.073391][T13763] [ 612.078090][T13763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 612.102532][T12013] usb 6-1: Using ep0 maxpacket: 32 [ 612.399878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 612.505330][T13771] fuse: Bad value for 'rootmode' [ 612.629529][T12013] usb 6-1: unable to get BOS descriptor or descriptor too short [ 612.655762][T12013] usb 6-1: config 0 has no interfaces? [ 612.677057][T12013] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.712740][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.746373][T12013] usb 6-1: Product: syz [ 612.756086][T13770] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 612.787192][T12013] usb 6-1: Manufacturer: syz [ 612.804788][T13770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.823701][T13770] team0: Port device netdevsim1 added [ 612.829075][T12013] usb 6-1: SerialNumber: syz [ 612.839988][T13776] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 612.933071][T12013] usb 6-1: config 0 descriptor?? [ 612.959538][T13776] team0: Port device netdevsim1 removed [ 612.996905][T13776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.034380][T13776] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 613.297159][T12013] usb 6-1: USB disconnect, device number 20 [ 613.627051][T13788] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5644] was attempted by "\x07 \x1b 0  \x07  /dev/vcsu \x0a  * \x07     \x09 @  0   q$     \x1b  [ 613.861008][T12013] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 614.049891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 614.080933][ C0] syzkaller0: tun_net_xmit 76 [ 614.247649][ T5694] usb 1-1: USB disconnect, device number 22 [ 614.370833][T12013] usb 2-1: Using ep0 maxpacket: 16 [ 614.428097][T12013] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 614.478918][T12013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.506743][T12013] usb 2-1: Product: syz [ 614.525772][T12013] usb 2-1: Manufacturer: syz [ 614.546384][T12013] usb 2-1: SerialNumber: syz [ 614.597487][T12013] r8152-cfgselector 2-1: Unknown version 0x0000 [ 614.597515][T12013] r8152-cfgselector 2-1: config 0 descriptor?? [ 614.808567][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.836692][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.853405][T13797] syzkaller0: entered promiscuous mode [ 614.859135][T13797] syzkaller0: entered allmulticast mode [ 615.130073][ C0] syzkaller0: tun_net_xmit 76 [ 615.243925][T13811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.257547][T13811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.161378][ C0] syzkaller0: tun_net_xmit 76 [ 616.566453][T12013] r8152-cfgselector 2-1: USB disconnect, device number 118 [ 616.634761][T13816] loop2: detected capacity change from 0 to 7 [ 616.650755][T13816] Dev loop2: unable to read RDB block 7 [ 616.656492][T13816] loop2: unable to read partition table [ 616.663298][T13816] loop2: partition table beyond EOD, truncated [ 616.670979][T13816] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 616.686588][ T4994] Dev loop2: unable to read RDB block 7 [ 616.693363][ T4994] loop2: unable to read partition table [ 616.699232][ T4994] loop2: partition table beyond EOD, truncated [ 617.206175][ C0] syzkaller0: tun_net_xmit 76 [ 617.504982][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2322'. [ 618.034903][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 618.180352][ T5694] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 618.239981][ C0] syzkaller0: tun_net_xmit 76 [ 618.360044][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 618.375485][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.407920][ T5694] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.428257][ T5694] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 618.464551][ T5694] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.483004][ T29] audit: type=1326 audit(1785725563.349:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.507802][ T5694] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 618.507837][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.529388][ T5694] usb 1-1: config 0 descriptor?? [ 618.580643][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2327'. [ 618.631836][ T29] audit: type=1326 audit(1785725563.359:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.678471][T13854] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[11255] was attempted by "\x07 \x1b 0  \x07  /dev/vcsu \x0a  * \x07     \x09 @  0   q$     \x1b  [ 618.700612][ T29] audit: type=1326 audit(1785725563.359:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.828285][ T29] audit: type=1326 audit(1785725563.399:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.853522][ T29] audit: type=1326 audit(1785725563.449:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.881160][ T29] audit: type=1326 audit(1785725563.449:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.974554][ T29] audit: type=1326 audit(1785725563.459:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 618.981740][T12013] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 619.007711][ T29] audit: type=1326 audit(1785725563.479:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 619.007766][ T29] audit: type=1326 audit(1785725563.479:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7859e019 code=0x7ffc0000 [ 619.007839][ T29] audit: type=1326 audit(1785725563.479:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13842 comm="syz.1.2327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d7855e84e code=0x7ffc0000 [ 619.034613][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 619.108766][T13856] loop2: detected capacity change from 0 to 7 [ 619.130919][T13856] Dev loop2: unable to read RDB block 7 [ 619.137472][T13856] loop2: unable to read partition table [ 619.147858][T13856] loop2: partition table beyond EOD, truncated [ 619.157734][T13856] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 619.169625][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 619.210847][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 619.279981][ C0] syzkaller0: tun_net_xmit 76 [ 619.409079][T13841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.430839][T12013] usb 6-1: Using ep0 maxpacket: 16 [ 619.454654][T12013] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 619.470903][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.491008][T12013] usb 6-1: Product: syz [ 619.498989][T12013] usb 6-1: Manufacturer: syz [ 619.515449][T12013] usb 6-1: SerialNumber: syz [ 619.539219][T12013] r8152-cfgselector 6-1: Unknown version 0x0000 [ 619.564388][T12013] r8152-cfgselector 6-1: config 0 descriptor?? [ 619.716966][T13866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.796410][T13854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.833101][T13854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.065761][ T5694] usbhid 1-1:0.0: can't add hid device: -71 [ 620.144569][ T5694] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 620.246924][ T5694] usb 1-1: USB disconnect, device number 23 [ 620.321422][ C0] syzkaller0: tun_net_xmit 76 [ 620.471292][T13872] xt_TCPMSS: Only works on TCP SYN packets [ 620.760007][ T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 620.949978][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 620.974409][ T10] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 620.998600][ T10] usb 2-1: config 0 has no interface number 1 [ 621.016687][ T10] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 621.050210][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 621.076300][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 621.102044][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 621.121607][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.131003][ T10] usb 2-1: Product: syz [ 621.135539][ T10] usb 2-1: Manufacturer: syz [ 621.142771][ T10] usb 2-1: SerialNumber: syz [ 621.161963][ T10] usb 2-1: config 0 descriptor?? [ 621.186558][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 621.352613][T13900] loop2: detected capacity change from 0 to 7 [ 621.370004][ C0] syzkaller0: tun_net_xmit 76 [ 621.378717][T13900] Dev loop2: unable to read RDB block 7 [ 621.391516][T13900] loop2: unable to read partition table [ 621.397743][T13900] loop2: partition table beyond EOD, truncated [ 621.404869][T13900] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 621.536827][ T5694] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 621.604234][ T2367] pvrusb2: Failed to submit write-control URB status=-90 [ 621.649246][ T10] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 621.721136][ T10] usb 2-1: USB disconnect, device number 119 [ 621.742837][ T2367] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 621.767945][T13907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.790400][ T2367] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 621.811153][T13907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.836069][T13907] loop9: detected capacity change from 0 to 2640 [ 621.861540][T13909] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 621.876095][T13907] buffer_io_error: 7 callbacks suppressed [ 621.876112][T13907] Buffer I/O error on dev loop9, logical block 0, async page read [ 621.994532][T13909] bond6: entered promiscuous mode [ 622.025991][T13909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 622.098068][T13912] bond6: (slave bridge3): making interface the new active one [ 622.119541][T13912] bridge3: entered promiscuous mode [ 622.125948][T10573] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 622.143805][T10573] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 622.162155][T13912] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 622.171116][T10573] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 622.188791][T10573] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 622.214917][T10573] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 622.235781][T10573] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 622.245914][T10573] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 622.258109][T10573] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 622.283770][T10573] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 622.399971][ C0] syzkaller0: tun_net_xmit 76 [ 622.455314][T13921] kvm: kvm [13920]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 622.550890][T12013] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 622.620521][ T5791] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 622.711373][T12013] usb 6-1: Using ep0 maxpacket: 32 [ 622.731329][T12013] usb 6-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 622.766056][T12013] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.784215][T12013] usb 6-1: config 1 interface 0 has no altsetting 0 [ 622.803674][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.830809][ T5791] usb 5-1: config 0 has no interfaces? [ 622.840710][T12013] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.854016][ T5791] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 622.863914][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.874350][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.883466][T12013] usb 6-1: Product: syz [ 622.888262][T12013] usb 6-1: Manufacturer: syz [ 622.895634][T12013] usb 6-1: SerialNumber: syz [ 622.907879][ T5791] usb 5-1: config 0 descriptor?? [ 622.982904][T13928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.996570][T13928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.136167][T13917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 623.439987][ C0] syzkaller0: tun_net_xmit 76 [ 623.516231][T13933] loop2: detected capacity change from 0 to 7 [ 623.526815][T13933] Dev loop2: unable to read RDB block 7 [ 623.540643][T13933] loop2: unable to read partition table [ 623.555259][T13933] loop2: partition table beyond EOD, truncated [ 623.562812][T13933] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 623.696424][T12013] cdc_ether 6-1:1.0: skipping garbage [ 623.705029][T12013] cdc_ether 6-1:1.0: skipping garbage [ 623.712507][ T5727] usb 5-1: USB disconnect, device number 14 [ 623.726995][T12013] cdc_ether 6-1:1.0: invalid descriptor buffer length [ 623.739646][T13938] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5646] was attempted by "\x07 \x1b 0  \x07  /dev/vcsu \x0a  * \x07     \x09 @  0   q$     \x1b  [ 623.742590][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.847337][T12013] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 623.859267][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.866663][T12013] usb 6-1: USB disconnect, device number 22 [ 623.879394][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.939301][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.048308][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 624.061678][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 624.246012][T13949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'. [ 624.262326][ T5694] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 624.314878][T13953] tap0: tun_chr_ioctl cmd 1074025677 [ 624.321792][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.325572][T13953] tap0: linktype set to 270 [ 624.328324][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.341915][T13954] tap0: tun_chr_ioctl cmd 1074025673 [ 624.348701][T13955] tap0: tun_chr_ioctl cmd 1074025677 [ 624.354342][T13955] tap0: linktype set to 270 [ 624.430006][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 624.441608][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.454626][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.464775][ T5694] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 624.474445][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.482645][ C0] syzkaller0: tun_net_xmit 76 [ 624.504955][ T5694] usb 5-1: config 0 descriptor?? [ 624.512220][ T5727] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 624.542897][ T5694] hub 5-1:0.0: USB hub found [ 624.689964][ T5727] usb 6-1: Using ep0 maxpacket: 8 [ 624.698465][ T5727] usb 6-1: unable to get BOS descriptor or descriptor too short [ 624.710538][ T5727] usb 6-1: config 117 has an invalid interface number: 163 but max is 0 [ 624.719196][ T5727] usb 6-1: config 117 has no interface number 0 [ 624.727007][ T5727] usb 6-1: config 117 interface 163 has no altsetting 0 [ 624.739630][ T5727] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 624.759660][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.768125][ T5694] hub 5-1:0.0: 1 port detected [ 624.773676][ T5727] usb 6-1: Product: syz [ 624.778210][ T5727] usb 6-1: Manufacturer: syz [ 624.783715][ T5727] usb 6-1: SerialNumber: syz [ 624.966875][T13962] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 625.205360][T13951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.215911][T13951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.223669][T12013] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 625.380971][T12013] usb 1-1: Using ep0 maxpacket: 32 [ 625.402807][T12013] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.413866][T13946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.423224][T12013] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.440511][T13946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.461823][T12013] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 625.480768][T12013] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 625.500877][T12013] usb 1-1: Product: syz [ 625.506097][T12013] usb 1-1: Manufacturer: syz [ 625.511909][T12013] usb 1-1: SerialNumber: syz [ 625.519984][ C0] syzkaller0: tun_net_xmit 76 [ 625.538089][ T5694] hub 5-1:0.0: activate --> -90 [ 625.545092][T12013] usb 1-1: config 0 descriptor?? [ 625.574424][T12013] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 625.778312][ T7502] usb 1-1: USB disconnect, device number 24 [ 625.787755][T11623] usb 1-1: Failed to submit usb control message: -71 [ 625.796974][T11623] usb 1-1: unable to send the bmi data to the device: -71 [ 625.807322][T11623] usb 1-1: unable to get target info from device [ 625.815620][T11623] usb 1-1: could not get target info (-71) [ 625.822787][T11623] usb 1-1: could not probe fw (-71) [ 625.955120][T13977] loop5: detected capacity change from 0 to 7 [ 625.963707][T13977] loop5: p1 < > p3 p4 [ 625.968051][T13977] loop5: partition table partially beyond EOD, truncated [ 625.979689][T13977] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 626.062927][T10573] udevd[10573]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 626.074065][T10197] udevd[10197]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 626.091299][T10199] udevd[10199]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 626.431396][T13981] PKCS7: Unknown OID: [4] 0.0.127.58.108.27.13(bad) [ 626.438354][T13981] PKCS7: Only support pkcs7_signedData type [ 626.569974][ C0] syzkaller0: tun_net_xmit 76 [ 626.714803][T13991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.736531][T13991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.053065][ T5694] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 627.083961][ T5694] usb 5-1-port1: config error [ 627.089083][ T7502] usb 5-1: USB disconnect, device number 15 [ 627.299174][ T5727] f81534a_ctrl 6-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 627.348114][ T5727] usb 6-1: USB disconnect, device number 23 [ 627.459675][T14007] syzkaller0: entered promiscuous mode [ 627.491493][T14007] syzkaller0: entered allmulticast mode [ 627.528875][T14009] tipc: Started in network mode [ 627.544110][T14009] tipc: Node identity ba381740d953, cluster identity 4711 [ 627.558372][T14009] tipc: Enabled bearer , priority 0 [ 627.570344][T14007] futex_wake_op: syz.5.2375 tries to shift op by -1; fix this program [ 627.599646][T14006] tipc: Resetting bearer [ 627.610282][ C0] syzkaller0: tun_net_xmit 76 [ 627.636608][T14006] tipc: Disabling bearer [ 628.639963][ C0] syzkaller0: tun_net_xmit 76 [ 629.149292][T14020] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 629.236970][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.297611][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.430722][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.518977][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.570658][T12013] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 629.605796][T14043] can: request_module (can-proto-5) failed. [ 629.627941][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 629.627960][ T29] audit: type=1326 audit(1785725574.499:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 629.679972][ C0] syzkaller0: tun_net_xmit 76 [ 629.740862][ T29] audit: type=1326 audit(1785725574.549:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 629.783318][T12013] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 629.812152][T12013] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 629.846499][T12013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.864298][ T29] audit: type=1326 audit(1785725574.569:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 629.903413][T12013] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 629.950782][ T29] audit: type=1326 audit(1785725574.569:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.103877][ T29] audit: type=1326 audit(1785725574.569:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.184539][ T29] audit: type=1326 audit(1785725574.569:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.282780][ T29] audit: type=1326 audit(1785725574.569:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.324332][T14036] syzkaller0: entered promiscuous mode [ 630.349974][T14036] syzkaller0: entered allmulticast mode [ 630.434452][ T29] audit: type=1326 audit(1785725574.569:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.684507][ T29] audit: type=1326 audit(1785725574.569:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.720219][ C0] syzkaller0: tun_net_xmit 76 [ 630.848904][ T29] audit: type=1326 audit(1785725574.569:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.4.2386" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b759e019 code=0x7ffc0000 [ 630.947399][T14079] loop2: detected capacity change from 0 to 7 [ 630.961506][T12013] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 630.979800][T14079] Dev loop2: unable to read RDB block 7 [ 630.998590][T14079] loop2: unable to read partition table [ 631.034330][T14079] loop2: partition table beyond EOD, truncated [ 631.048741][T14079] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 631.477300][T12013] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 631.489715][T12013] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 631.562025][ T5694] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 631.699215][T14089] kvm: pic: non byte write [ 631.755142][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.766184][ C0] syzkaller0: tun_net_xmit 76 [ 631.783980][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.795382][ T5694] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 631.813400][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.848276][ T5694] usb 6-1: config 0 descriptor?? [ 632.275278][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.300007][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.315757][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.333085][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.350601][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.360401][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.376190][ T5694] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x0 [ 632.403789][ T5694] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 632.535141][ T5694] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 632.551064][ T5694] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 632.581244][ T5694] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -5 [ 632.801792][ C0] syzkaller0: tun_net_xmit 76 [ 633.850025][ C0] syzkaller0: tun_net_xmit 76 [ 634.217320][T14102] input: syz1 as /devices/virtual/input/input85 [ 634.312421][ T5694] usb 6-1: USB disconnect, device number 24 [ 634.528806][ T5727] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 634.700150][ T5727] usb 5-1: Using ep0 maxpacket: 16 [ 634.707796][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.721215][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.731203][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.744216][ T5727] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.753633][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.774180][ T5727] usb 5-1: config 0 descriptor?? [ 634.801817][T14092] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 634.827868][ T5724] usb 1-1: USB disconnect, device number 25 [ 634.855395][ T5694] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 634.880001][ C0] syzkaller0: tun_net_xmit 76 [ 635.022092][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.076887][ T5694] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 635.114476][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.147828][ T5694] usb 6-1: config 0 descriptor?? [ 635.161768][T14119] loop2: detected capacity change from 0 to 7 [ 635.182863][T14119] Dev loop2: unable to read RDB block 7 [ 635.195400][T14119] loop2: unable to read partition table [ 635.204368][T14119] loop2: partition table beyond EOD, truncated [ 635.212105][T14119] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 635.272455][ T5727] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 635.327233][ T5727] microsoft 0003:045E:07DA.0016: no inputs found [ 635.367963][ T5727] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 635.396759][ T5694] usbhid 6-1:0.0: can't add hid device: -71 [ 635.414307][ T5694] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 635.438120][ T5727] usb 5-1: USB disconnect, device number 16 [ 635.469209][ T5694] usb 6-1: USB disconnect, device number 25 [ 635.492897][T14122] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2405'. [ 635.525620][T14122] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2405'. [ 635.570635][T14120] fido_id[14120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 635.919989][ C0] syzkaller0: tun_net_xmit 76 [ 635.960479][ T5694] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 636.002922][T14129] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 636.009482][T14129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 636.022730][T14129] vhci_hcd vhci_hcd.0: Device attached [ 636.034903][T14129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.044517][T14129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.060127][T14130] vhci_hcd: connection closed [ 636.063518][ T1053] vhci_hcd vhci_hcd.2: stop threads [ 636.074998][ T1053] vhci_hcd vhci_hcd.2: release socket [ 636.081295][ T1053] vhci_hcd vhci_hcd.2: disconnect device [ 636.131182][ T5694] usb 6-1: Using ep0 maxpacket: 32 [ 636.143508][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.156913][ T5694] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 636.167221][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.179661][ T5694] usb 6-1: config 0 descriptor?? [ 636.194640][ T5694] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 636.213440][ T5694] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 636.652184][ T5694] usb 6-1: USB disconnect, device number 26 [ 636.706308][ T5694] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 636.756291][T14136] tipc: Enabled bearer , priority 10 [ 636.765230][T14135] tipc: Resetting bearer [ 636.787109][T14135] tipc: Disabling bearer [ 636.960001][ C0] syzkaller0: tun_net_xmit 76 [ 637.081503][T14145] loop5: detected capacity change from 0 to 7 [ 637.096312][T14145] loop5: p1 < > p3 p4 [ 637.105532][T14145] loop5: partition table partially beyond EOD, truncated [ 637.126090][T14145] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 637.234667][T10197] udevd[10197]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 637.251174][T10428] udevd[10428]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 637.266148][T10573] udevd[10573]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 637.394414][T14147] syzkaller0: entered promiscuous mode [ 637.603634][T14154] loop2: detected capacity change from 0 to 7 [ 637.630976][T14154] Dev loop2: unable to read RDB block 7 [ 637.650845][T14154] loop2: unable to read partition table [ 637.668965][T14154] loop2: partition table beyond EOD, truncated [ 637.695939][T14154] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 637.728198][ T4994] Dev loop2: unable to read RDB block 7 [ 637.734819][ T4994] loop2: unable to read partition table [ 637.742936][ T4994] loop2: partition table beyond EOD, truncated [ 637.999970][ C0] syzkaller0: tun_net_xmit 76 [ 638.037952][T14170] kvm: pic: non byte write [ 638.058873][T14174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.099236][T14174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.129990][ T5694] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 638.168281][T14176] loop5: detected capacity change from 0 to 7 [ 638.188152][T14176] loop5: p1 < > p3 p4 [ 638.199750][T14176] loop5: partition table partially beyond EOD, truncated [ 638.218001][T14176] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 638.279980][ T5694] usb 1-1: device descriptor read/64, error -71 [ 638.305637][T10573] udevd[10573]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 638.336305][T10428] udevd[10428]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 638.348767][T10197] udevd[10197]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 638.532338][ T5694] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 638.689993][ T5694] usb 1-1: device descriptor read/64, error -71 [ 638.821093][ T5694] usb usb1-port1: attempt power cycle [ 639.039961][ C0] syzkaller0: tun_net_xmit 76 [ 639.180400][ T5694] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 639.246269][ T5694] usb 1-1: device descriptor read/8, error -71 [ 639.550454][ T5694] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 639.610787][ T5694] usb 1-1: device descriptor read/8, error -71 [ 639.634672][ T13] tipc: Subscription rejected, illegal request [ 639.731091][ T5694] usb usb1-port1: unable to enumerate USB device [ 639.930724][ T5694] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 640.064792][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.080039][ C0] syzkaller0: tun_net_xmit 76 [ 640.120803][ T5694] usb 6-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 640.141631][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.165589][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.226101][ T5694] usb-storage 6-1:32.0: USB Mass Storage device detected [ 640.315851][ T5694] usb-storage 6-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 640.394041][T14211] loop2: detected capacity change from 0 to 7 [ 640.454036][T14211] Dev loop2: unable to read RDB block 7 [ 640.478083][T14211] loop2: unable to read partition table [ 640.511842][T14211] loop2: partition table beyond EOD, truncated [ 640.545803][T14211] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 641.080507][ T5727] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 641.098281][T14215] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 641.130001][ C0] syzkaller0: tun_net_xmit 76 [ 641.290112][ T5727] usb 5-1: Using ep0 maxpacket: 8 [ 641.303971][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.327230][ T5727] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 641.352564][ T5727] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.398411][ T5727] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 641.430957][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.454392][ T5727] usb 5-1: Product: syz [ 641.470309][ T5727] usb 5-1: Manufacturer: syz [ 641.483335][ T5727] usb 5-1: SerialNumber: syz [ 642.064712][T14222] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2436'. [ 642.159984][ C0] syzkaller0: tun_net_xmit 76 [ 642.615190][ T5694] usb 6-1: USB disconnect, device number 28 [ 643.083570][T14232] loop3: detected capacity change from 0 to 7 [ 643.114320][T14232] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 643.145333][T14232] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 643.170210][T14232] Dev loop3: unable to read RDB block 7 [ 643.176138][T14232] loop3: AHDI p2 p4 [ 643.191929][T14232] loop3: partition table partially beyond EOD, truncated [ 643.200050][ C0] syzkaller0: tun_net_xmit 76 [ 643.221849][T14232] loop3: p4 start 150997256 is beyond EOD, truncated [ 643.495595][T14236] tipc: Enabled bearer , priority 10 [ 643.525654][T14236] FAULT_INJECTION: forcing a failure. [ 643.525654][T14236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.571298][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.5.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.571325][T14236] Tainted: [L]=SOFTLOCKUP [ 643.571332][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.571342][T14236] Call Trace: [ 643.571348][T14236] [ 643.571356][T14236] dump_stack_lvl+0xe8/0x150 [ 643.571390][T14236] should_fail_ex+0x40c/0x560 [ 643.571417][T14236] _copy_from_iter+0x1d3/0x1660 [ 643.571440][T14236] ? skb_set_owner_w+0x263/0x3d0 [ 643.571471][T14236] ? __pfx__copy_from_iter+0x10/0x10 [ 643.571500][T14236] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 643.571524][T14236] skb_copy_datagram_from_iter+0xe6/0x720 [ 643.571551][T14236] ? skb_put+0x112/0x210 [ 643.571570][T14236] tun_get_user+0x1520/0x4370 [ 643.571682][T14236] ? aa_file_perm+0x18b/0x15f0 [ 643.571706][T14236] ? aa_file_perm+0x4ed/0x15f0 [ 643.571725][T14236] ? __pfx_tun_get_user+0x10/0x10 [ 643.571751][T14236] ? __lock_acquire+0x683/0x2cf0 [ 643.571777][T14236] ? kstrtoull+0x12f/0x1d0 [ 643.571803][T14236] ? ref_tracker_alloc+0x341/0x4b0 [ 643.571866][T14236] ? get_pid_task+0x20/0x1f0 [ 643.571893][T14236] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 643.571914][T14236] ? tun_get+0x1c/0x2f0 [ 643.571935][T14236] ? tun_get+0x1c/0x2f0 [ 643.571959][T14236] ? tun_get+0x1c/0x2f0 [ 643.571980][T14236] ? tun_get+0x1c/0x2f0 [ 643.572004][T14236] tun_chr_write_iter+0x113/0x200 [ 643.572027][T14236] vfs_write+0x612/0xba0 [ 643.572049][T14236] ? __pfx_vfs_write+0x10/0x10 [ 643.572070][T14236] ? __fget_files+0x2a/0x420 [ 643.572095][T14236] ksys_write+0x150/0x270 [ 643.572111][T14236] ? __pfx_ksys_write+0x10/0x10 [ 643.572130][T14236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.572147][T14236] do_syscall_64+0x174/0x580 [ 643.572167][T14236] ? trace_irq_disable+0x3b/0x140 [ 643.572187][T14236] ? clear_bhb_loop+0x40/0x90 [ 643.572205][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.572219][T14236] RIP: 0033:0x7fa97e39e019 [ 643.572233][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.572246][T14236] RSP: 002b:00007fa97f2d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 643.572262][T14236] RAX: ffffffffffffffda RBX: 00007fa97e625fa0 RCX: 00007fa97e39e019 [ 643.572272][T14236] RDX: 000000000000000e RSI: 0000200000000500 RDI: 0000000000000003 [ 643.572282][T14236] RBP: 00007fa97f2d0090 R08: 0000000000000000 R09: 0000000000000000 [ 643.572291][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.572300][T14236] R13: 00007fa97e626038 R14: 00007fa97e625fa0 R15: 00007fa97e74fa48 [ 643.572323][T14236] [ 643.998208][T14235] tipc: Resetting bearer [ 644.116093][T14235] tipc: Disabling bearer [ 644.249995][ C0] syzkaller0: tun_net_xmit 76 [ 644.307979][T14246] tipc: Enabled bearer , priority 10 [ 644.343952][T14245] tipc: Resetting bearer [ 644.425423][T14245] tipc: Disabling bearer [ 644.970657][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 644.970684][ T29] audit: type=1326 audit(1785725589.849:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.2.2449" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f717d99e019 code=0x0 [ 645.180078][ T5694] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 645.279973][ C0] syzkaller0: tun_net_xmit 76 [ 645.344682][ T5694] usb 1-1: Using ep0 maxpacket: 16 [ 645.366655][ T5694] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 645.399936][ T5694] usb 1-1: config 0 has no interface number 0 [ 645.418991][ T5694] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 645.464682][ T5694] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 645.495452][T14268] loop3: detected capacity change from 0 to 7 [ 645.500450][ T5694] usb 1-1: config 0 interface 41 has no altsetting 0 [ 645.511660][T14268] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 645.524896][T14268] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 645.532754][T14268] Dev loop3: unable to read RDB block 7 [ 645.538881][T14268] loop3: AHDI p2 p4 [ 645.543665][T14268] loop3: partition table partially beyond EOD, truncated [ 645.544097][ T5694] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 645.557910][T14268] loop3: p4 start 150997256 is beyond EOD, truncated [ 645.581336][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.601641][ T5727] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 645.620268][ T5694] usb 1-1: Product: syz [ 645.627960][ T5694] usb 1-1: Manufacturer: syz [ 645.638442][ T5727] usb 5-1: USB disconnect, device number 17 [ 645.649905][ T5694] usb 1-1: SerialNumber: syz [ 645.671128][ T5694] usb 1-1: config 0 descriptor?? [ 645.691172][T14262] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 645.701443][T14262] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 645.755022][T10428] udevd[10428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.802365][T14270] loop3: detected capacity change from 0 to 7 [ 645.820760][T14270] loop3: p1 p4 [ 645.830281][T14270] loop3: partition table partially beyond EOD, truncated [ 645.941278][T14260] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 645.948649][T14260] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 645.996073][T10428] udevd[10428]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 646.019639][T10197] udevd[10197]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 646.054000][T14274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2454'. [ 646.150301][T14280] tipc: Enabled bearer , priority 10 [ 646.164761][T14280] FAULT_INJECTION: forcing a failure. [ 646.164761][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.178777][ T5694] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 646.190065][T14280] CPU: 0 UID: 0 PID: 14280 Comm: syz.2.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.190099][T14280] Tainted: [L]=SOFTLOCKUP [ 646.190108][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.190122][T14280] Call Trace: [ 646.190132][T14280] [ 646.190141][T14280] dump_stack_lvl+0xe8/0x150 [ 646.190182][T14280] should_fail_ex+0x40c/0x560 [ 646.190217][T14280] _copy_to_user+0x31/0xb0 [ 646.190242][T14280] simple_read_from_buffer+0xe1/0x170 [ 646.190280][T14280] proc_fail_nth_read+0x1bb/0x230 [ 646.190316][T14280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.190352][T14280] ? rw_verify_area+0x24a/0x4c0 [ 646.190375][T14280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.190406][T14280] vfs_read+0x213/0xa80 [ 646.190433][T14280] ? __pfx___mutex_lock+0x10/0x10 [ 646.190463][T14280] ? __pfx_vfs_read+0x10/0x10 [ 646.190487][T14280] ? __fget_files+0x2a/0x420 [ 646.190522][T14280] ? __fget_files+0x3a2/0x420 [ 646.190550][T14280] ? __fget_files+0x2a/0x420 [ 646.190598][T14280] ksys_read+0x150/0x270 [ 646.190622][T14280] ? __pfx_ksys_read+0x10/0x10 [ 646.190653][T14280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.190677][T14280] do_syscall_64+0x174/0x580 [ 646.190706][T14280] ? clear_bhb_loop+0x40/0x90 [ 646.190733][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.190756][T14280] RIP: 0033:0x7f717d95e84e [ 646.190776][T14280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.190795][T14280] RSP: 002b:00007f717bbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.190818][T14280] RAX: ffffffffffffffda RBX: 00007f717bbf66c0 RCX: 00007f717d95e84e [ 646.190834][T14280] RDX: 000000000000000f RSI: 00007f717bbf60a0 RDI: 0000000000000006 [ 646.190847][T14280] RBP: 00007f717bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 646.190861][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.190874][T14280] R13: 00007f717dc26038 R14: 00007f717dc25fa0 R15: 00007f717dd4fa48 [ 646.190908][T14280] [ 646.405943][ C0] syzkaller0: tun_net_xmit 76 [ 646.495562][T14278] tipc: Resetting bearer [ 646.526634][T14278] tipc: Disabling bearer [ 646.743185][T14294] ip_tables: iptables: counters copy to user failed while replacing table [ 647.000518][ T5727] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 647.149980][ T5727] usb 5-1: Using ep0 maxpacket: 16 [ 647.157230][ T5727] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 647.184434][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.220943][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.244911][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 647.271082][ T5727] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 647.284122][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.300631][ T5727] usb 5-1: config 0 descriptor?? [ 647.352449][T14300] loop3: detected capacity change from 0 to 7 [ 647.364639][T14300] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 647.388316][T14300] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 647.415545][T14300] Dev loop3: unable to read RDB block 7 [ 647.428480][T14300] loop3: AHDI p2 p4 [ 647.440094][ C0] syzkaller0: tun_net_xmit 76 [ 647.452670][T14300] loop3: partition table partially beyond EOD, truncated [ 647.468564][T14300] loop3: p4 start 150997256 is beyond EOD, truncated [ 647.518759][T14294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.565930][T14294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.646364][T14303] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2464'. [ 647.655856][T14303] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2464'. [ 647.823818][ T5727] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0017/input/input87 [ 647.982244][ T5727] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0017/input/input88 [ 648.010272][ T7500] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 648.103511][ T5724] usb 1-1: USB disconnect, device number 30 [ 648.184654][ T5727] kye 0003:0458:5013.0017: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 648.232899][ T7500] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 648.254778][ T7500] usb 6-1: can't read configurations, error -71 [ 648.262524][ T5727] usb 5-1: USB disconnect, device number 18 [ 648.300220][T14310] futex_wake_op: syz.2.2467 tries to shift op by 32; fix this program [ 648.425946][T14307] fido_id[14307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 648.480069][ C0] syzkaller0: tun_net_xmit 76 [ 648.681325][T14315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.694766][T14315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.710450][ T5724] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 648.883124][ T5724] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 648.893228][ T5724] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 648.905037][ T5724] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 648.916768][ T5724] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 648.926388][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.939400][T14317] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 648.952529][T14325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2471'. [ 649.110073][ T7500] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 649.221941][ T5724] usb 1-1: string descriptor 0 read error: -71 [ 649.233550][ T5791] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 649.261283][ T7500] usb 6-1: Using ep0 maxpacket: 32 [ 649.291161][ T7500] usb 6-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 649.300883][ T7500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.308951][ T7500] usb 6-1: Product: syz [ 649.313975][ T7500] usb 6-1: Manufacturer: syz [ 649.318632][ T7500] usb 6-1: SerialNumber: syz [ 649.391948][ T5724] usb 1-1: USB disconnect, device number 31 [ 649.420659][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 649.442228][ T5791] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 649.474606][ T5791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 649.487358][ T5791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.499923][ T5791] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.513515][ T5791] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.520604][ C0] syzkaller0: tun_net_xmit 76 [ 649.528714][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.549296][ T7500] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 649.686414][T14335] loop3: detected capacity change from 0 to 7 [ 649.698035][T14335] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 649.708860][T14335] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 649.715920][T14335] Dev loop3: unable to read RDB block 7 [ 649.722069][T14335] loop3: AHDI p2 p4 [ 649.726172][T14335] loop3: partition table partially beyond EOD, truncated [ 649.733932][T14335] loop3: p4 start 150997256 is beyond EOD, truncated [ 649.745105][ T7500] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 649.761451][ T7500] usb 6-1: unit 1 not found! [ 649.770524][ T5791] usb 5-1: GET_CAPABILITIES returned 0 [ 649.777350][ T5791] usbtmc 5-1:16.0: can't read capabilities [ 649.781581][ T7500] usb 6-1: unit 3 not found! [ 649.906845][ T7500] usb 6-1: USB disconnect, device number 30 [ 649.965418][T10428] udevd[10428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.003646][ T5724] usb 5-1: USB disconnect, device number 19 [ 650.520470][ T5724] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 650.560084][ C0] syzkaller0: tun_net_xmit 76 [ 650.683709][ T5724] usb 1-1: config 100 has an invalid interface number: 124 but max is 0 [ 650.697279][ T5724] usb 1-1: config 100 has no interface number 0 [ 650.713308][ T5724] usb 1-1: config 100 interface 124 has no altsetting 0 [ 650.727095][ T5724] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 650.738147][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.747075][ T5724] usb 1-1: Product: syz [ 650.753983][ T5724] usb 1-1: Manufacturer: syz [ 650.779708][ T5724] usb 1-1: SerialNumber: syz [ 650.896724][T14364] bridge0: left allmulticast mode [ 650.909516][T14364] netlink: 'syz.2.2483': attribute type 10 has an invalid length. [ 650.918307][T14364] bridge0: left promiscuous mode [ 650.935815][T14366] loop2: detected capacity change from 0 to 7 [ 650.943317][T14366] Dev loop2: unable to read RDB block 7 [ 650.949058][T14366] loop2: unable to read partition table [ 650.956211][T14366] loop2: partition table beyond EOD, truncated [ 650.963872][T14366] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 651.012961][T14347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.037870][T14347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.062597][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.097152][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.150641][T14373] loop3: detected capacity change from 0 to 7 [ 651.166315][T14373] loop3: p1 p4 [ 651.171692][ T5724] idmouse 1-1:100.124: Unable to find bulk-in endpoint. [ 651.185027][T14373] loop3: partition table partially beyond EOD, truncated [ 651.206202][ T5724] usb 1-1: USB disconnect, device number 32 [ 651.372968][T10428] udevd[10428]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 651.377752][T10573] udevd[10573]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 651.571338][ T5791] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 651.593038][ T29] audit: type=1326 audit(1785725596.469:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14386 comm="syz.2.2491" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f717d99e019 code=0x0 [ 651.601007][ C0] syzkaller0: tun_net_xmit 76 [ 651.732787][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.753323][ T5791] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 651.776453][ T5791] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.785914][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.808198][ T5791] usb 5-1: config 0 descriptor?? [ 651.839578][ T5791] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 651.948515][T14398] tipc: Enabled bearer , priority 0 [ 651.958135][T14398] syzkaller0: entered promiscuous mode [ 651.964194][T14399] trusted_key: syz.5.2494 sent an empty control message without MSG_MORE. [ 651.973794][T14398] syzkaller0: entered allmulticast mode [ 652.044083][T14400] tipc: Resetting bearer [ 652.204590][T14397] tipc: Resetting bearer [ 652.225112][T14397] tipc: Disabling bearer [ 652.231391][ T5791] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 652.394810][T14401] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 652.405617][ T5791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 652.431938][T14403] loop2: detected capacity change from 0 to 7 [ 652.442370][T14403] Dev loop2: unable to read RDB block 7 [ 652.446572][ T5791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 652.448151][T14403] loop2: unable to read partition table [ 652.467776][T14403] loop2: partition table beyond EOD, truncated [ 652.474541][T14403] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 652.482177][ T5791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.511297][ T5791] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.521024][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.529244][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 652.543745][ T5791] usb 6-1: config 0 descriptor?? [ 652.550762][T14399] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 652.572825][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2488'. [ 652.640116][ C0] syzkaller0: tun_net_xmit 76 [ 652.693984][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 652.703682][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 652.713367][T14410] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 652.723757][T14409] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 652.903872][T14414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.922893][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 652.933760][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'. [ 652.987050][ T5791] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x6 [ 652.995318][T12013] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 653.016462][ T5791] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x5 [ 653.035881][ T5791] plantronics 0003:047F:FFFF.0018: item fetching failed at offset 12/15 [ 653.052656][ T5791] plantronics 0003:047F:FFFF.0018: parse failed [ 653.052732][ T5791] plantronics 0003:047F:FFFF.0018: probe with driver plantronics failed with error -22 [ 653.160467][T12013] usb 1-1: Using ep0 maxpacket: 32 [ 653.171242][T12013] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 653.195395][T12013] usb 1-1: config 0 has no interface number 0 [ 653.219287][T12013] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 653.241832][T12013] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 653.271527][T12013] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 653.297506][T12013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.322609][T12013] usb 1-1: Product: syz [ 653.337369][T12013] usb 1-1: Manufacturer: syz [ 653.348972][T12013] usb 1-1: SerialNumber: syz [ 653.368721][T12013] usb 1-1: config 0 descriptor?? [ 653.387512][T12013] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 653.585001][T12013] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 653.601154][T12013] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 653.680157][ C0] syzkaller0: tun_net_xmit 76 [ 653.798090][T12013] usb 1-1: USB disconnect, device number 33 [ 654.373639][ T7500] usb 5-1: USB disconnect, device number 20 [ 654.483615][ T5727] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 654.540444][ T5727] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 654.720247][ C0] syzkaller0: tun_net_xmit 76 [ 654.801380][T14446] tipc: Enabling of bearer rejected, already enabled [ 654.962928][T14449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.988551][T14449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.021518][T12013] usb 6-1: USB disconnect, device number 31 [ 655.051412][T14449] netlink: 'syz.1.2508': attribute type 21 has an invalid length. [ 655.088891][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2508'. [ 655.402253][T14465] loop2: detected capacity change from 0 to 7 [ 655.426215][T14465] Dev loop2: unable to read RDB block 7 [ 655.448227][T14465] loop2: unable to read partition table [ 655.468855][T14465] loop2: partition table beyond EOD, truncated [ 655.492987][T14465] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 655.760186][ C0] syzkaller0: tun_net_xmit 76 [ 655.801592][ T5791] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 655.995898][ T5791] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 656.060785][ T5791] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 656.090016][ T5727] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 656.102664][ T5791] usb 6-1: config 220 interface 0 has no altsetting 0 [ 656.138519][ T5791] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 656.179434][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.223820][ T5791] usb 6-1: Product: syz [ 656.257419][ T5791] usb 6-1: Manufacturer: syz [ 656.279765][ T5791] usb 6-1: SerialNumber: syz [ 656.302055][ T5727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.362894][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 656.439413][ T5727] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.494289][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.578791][ T5727] usb 5-1: config 0 descriptor?? [ 656.621869][ T5727] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 656.697133][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.773624][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.800194][ C0] syzkaller0: tun_net_xmit 76 [ 657.202077][T14491] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 657.353775][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2514'. [ 657.457553][T14495] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 657.481691][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2514'. [ 657.526117][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.545144][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.592108][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.617619][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.840075][ C0] syzkaller0: tun_net_xmit 76 [ 658.857736][T14518] loop2: detected capacity change from 0 to 7 [ 658.880236][ C0] syzkaller0: tun_net_xmit 76 [ 658.888250][T14518] Dev loop2: unable to read RDB block 7 [ 658.902628][ T7500] usb 5-1: USB disconnect, device number 21 [ 658.915249][T14518] loop2: unable to read partition table [ 658.959317][T14518] loop2: partition table beyond EOD, truncated [ 659.003419][T14518] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) Stopping sshd: stopped /usr/sbin/sshd (pid 5382) OK [ 659.425431][ T7500] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 659.479050][ T5791] uvcvideo 6-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 659.523459][ T5791] uvcvideo 6-1:220.0: No valid video chain found. [ 659.572996][ T5791] usb 6-1: USB disconnect, device number 32 [ 659.585828][T14506] pim6reg: entered allmulticast mode [ 659.681772][ T7500] usb 5-1: Using ep0 maxpacket: 32 Stopping crond: [ 659.728046][ T7500] usb 5-1: unable to get BOS descriptor or descriptor too short [ 659.738186][T14531] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[11255] was attempted by "\x07 \x1b 0 \x0a N$   \x07  /dev/vcsu \x0a  * \x07     \x09 @  0   q$     \x1b [ 659.761248][ T7500] usb 5-1: config 1 has an invalid interface number: 134 but max is 0 [ 659.920270][ C0] syzkaller0: tun_net_xmit 76 [ 659.980203][ T7500] usb 5-1: config 1 has an invalid interface number: 177 but max is 0 [ 660.009030][ T7500] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 660.029655][ T7500] usb 5-1: config 1 has no interface number 0 [ 660.040814][ T7500] usb 5-1: config 1 has no interface number 1 [ 660.058573][ T7500] usb 5-1: config 1 interface 134 altsetting 197 endpoint 0x8 has invalid maxpacket 512, setting to 64 stopped /usr/sbin/crond (pid 5367) [ 660.082985][ T5791] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 660.111546][ T7500] usb 5-1: config 1 interface 134 altsetting 197 has an endpoint descriptor with address 0x9F, changing to 0x8F OK [ 660.132991][T14534] vlan2: entered promiscuous mode [ 660.142834][T14534] batadv0: entered promiscuous mode [ 660.147485][ T7500] usb 5-1: config 1 interface 134 altsetting 197 endpoint 0x8F has invalid maxpacket 510, setting to 64 [ 660.189970][ T7500] usb 5-1: config 1 interface 134 altsetting 197 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 660.227760][ T7500] usb 5-1: too many endpoints for config 1 interface 177 altsetting 199: 188, using maximum allowed: 30 [ 660.255246][ T7500] usb 5-1: config 1 interface 177 altsetting 199 endpoint 0xB has invalid wMaxPacketSize 0 [ 660.269002][ T7500] usb 5-1: config 1 interface 177 altsetting 199 has 1 endpoint descriptor, different from the interface descriptor's value: 188 [ 660.275113][ T5791] usb 6-1: Using ep0 maxpacket: 16 [ 660.308065][ T7500] usb 5-1: config 1 interface 134 has no altsetting 0 [ 660.329394][ T5791] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 660.338851][ T7500] usb 5-1: config 1 interface 177 has no altsetting 0 [ 660.350024][ T7500] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice=d0.35 [ 660.368139][ T7500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.371607][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.397062][ T7500] usb 5-1: Product: 澱雂軓㜤⳯챇ࣘ㥆뭿왻寶⡱꽴傉涒㰬㬌盶䦠뾙๝ᛶ햠◺胥Ø꺂䳝炂ሕ兜ᑏ♝렮≼ⷐꐲ鮽氁㟆휦칝暍軥瀜ᤎ௜㶊㓃槒쭛殟㮿ઔ薇డ샺濹埞摫ꟽꆕ=꩗怨芮≯柚蓎㭦잮ণ燖晩ҭ揄푴䟴챖⋏⟴ᘿஒ뒫푋와ও藽읤⫺毕≙鉛⊤᪘飲췤ʬ鈳꘠儚꠽ુ솅뮻읐ᒿહ꤯ᴖ帜稡袕麆 [ 660.421060][ T5791] usb 6-1: Product: syz [ 660.474871][ T7500] usb 5-1: Manufacturer: 鴻ج痋樾튉ሞ굦맬尷옾ᮉߙ伩셱햨䁘ᒚ婔᏷韃⼅峁䪦怆䕠⥁ꅴò㷢桭告瀚뢭浒ᆰ⧃鋌뙪裟䇮仢翱룓뛠꼢ꏬ骄ⱹ》衞뎸錂廠偮Ṟ鸕ꑑ㐃註Ꞹ㈖曏䎑怓གྷᩒ鲇ᓏ墛ដࢮ僎唎詫ꪺ㱖슩挥맇إ폾옌沦瘏ਁᢵ [ 660.507409][ T5791] usb 6-1: Manufacturer: syz [ 660.524929][ T5791] usb 6-1: SerialNumber: syz [ 660.547139][ T5791] r8152-cfgselector 6-1: Unknown version 0x0000 [ 660.556991][ T5791] r8152-cfgselector 6-1: config 0 descriptor?? [ 660.566625][ T7500] usb 5-1: SerialNumber: 枥轶ꟃꥪម橹냋癅栮⑑ꟍල阝ꔰ㍶࠱㺲痳揘滨泶눀䯓ཋᯱ䒷Ꚛ뇫梸⪋唆㈀祱픉犄燱锻㑕꒿⨴ஷꖒ㐉뼿鎉㢀軧蹆쭞笓㥉ᬙ蘫岈垁۱䮨橋ꀃ㾚熀 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5288) [ 660.787316][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.813863][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.829289][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.853996][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.960171][ C0] syzkaller0: tun_net_xmit 76 [ 661.041909][ T7500] usb 5-1: USB disconnect, device number 22 [ 661.105918][T10573] udevd[10573]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 661.135400][T10428] udevd[10428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.145550][T10573] udevd[10573]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory Stopping network: [ 661.709621][T14562] FAULT_INJECTION: forcing a failure. [ 661.709621][T14562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.723310][T14562] CPU: 0 UID: 0 PID: 14562 Comm: syz.4.2531 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.723344][T14562] Tainted: [L]=SOFTLOCKUP [ 661.723353][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.723366][T14562] Call Trace: [ 661.723374][T14562] [ 661.723384][T14562] dump_stack_lvl+0xe8/0x150 [ 661.723421][T14562] should_fail_ex+0x40c/0x560 [ 661.723456][T14562] _copy_to_user+0x31/0xb0 [ 661.723482][T14562] simple_read_from_buffer+0xe1/0x170 [ 661.723518][T14562] proc_fail_nth_read+0x1bb/0x230 [ 661.723553][T14562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.723588][T14562] ? rw_verify_area+0x24a/0x4c0 [ 661.723609][T14562] ? __local_bh_enable_ip+0xd0/0x130 [ 661.723672][T14562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 661.723704][T14562] vfs_read+0x213/0xa80 [ 661.723732][T14562] ? __pfx___mutex_lock+0x10/0x10 [ 661.723762][T14562] ? __pfx_vfs_read+0x10/0x10 [ 661.723785][T14562] ? __fget_files+0x2a/0x420 [ 661.723820][T14562] ? __fget_files+0x3a2/0x420 [ 661.723848][T14562] ? __fget_files+0x2a/0x420 [ 661.723886][T14562] ksys_read+0x150/0x270 [ 661.723911][T14562] ? __pfx_ksys_read+0x10/0x10 [ 661.723941][T14562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.723978][T14562] do_syscall_64+0x174/0x580 [ 661.724004][T14562] ? trace_irq_disable+0x3b/0x140 [ 661.724033][T14562] ? clear_bhb_loop+0x40/0x90 [ 661.724059][T14562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.724081][T14562] RIP: 0033:0x7fe3b755e84e [ 661.724100][T14562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.724118][T14562] RSP: 002b:00007fe3b837dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.724141][T14562] RAX: ffffffffffffffda RBX: 00007fe3b837e6c0 RCX: 00007fe3b755e84e [ 661.724155][T14562] RDX: 000000000000000f RSI: 00007fe3b837e0a0 RDI: 0000000000000004 [ 661.724168][T14562] RBP: 00007fe3b837e090 R08: 0000000000000000 R09: 0000000000000000 [ 661.724181][T14562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.724194][T14562] R13: 00007fe3b7826128 R14: 00007fe3b7826090 R15: 00007fe3b794fa48 [ 661.724230][T14562] [ 662.000129][ C0] syzkaller0: tun_net_xmit 76 [ 662.129957][ T7500] usb 1-1: new high-speed USB device number 34 using dummy_hcd OK [ 662.281581][ T7500] usb 1-1: Using ep0 maxpacket: 8 [ 662.297348][ T7500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 662.316090][ T7500] usb 1-1: config 117 has an invalid interface number: 163 but max is 0 [ 662.326231][ T7500] usb 1-1: config 117 has no interface number 0 [ 662.334190][ T7500] usb 1-1: config 117 interface 163 has no altsetting 0 Stopping iptables: [ 662.366404][ T7500] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 662.401813][ T7500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.424492][ T7500] usb 1-1: Product: syz [ 662.435758][ T7500] usb 1-1: Manufacturer: syz [ 662.447373][ T7500] usb 1-1: SerialNumber: syz OK [ 662.626465][ T5727] r8152-cfgselector 6-1: USB disconnect, device number 33 Stopping system message bus: [ 662.690099][ T5694] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 662.856534][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.915983][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.925028][ T5694] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 662.966034][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.983818][ T5694] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.997877][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.038813][ T7500] f81534a_ctrl 1-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 663.048554][ C0] syzkaller0: tun_net_xmit 76 [ 663.060918][ T5694] usb 5-1: config 0 descriptor?? [ 663.082172][ T5694] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 663.123185][ T7500] usb 1-1: USB disconnect, device number 34 [ 663.687167][T14598] netlink: 'syz.4.2534': attribute type 1 has an invalid length. [ 663.813805][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 663.946392][T14587] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 663.952991][T14587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 663.984516][T14587] vhci_hcd vhci_hcd.0: Device attached [ 663.999759][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2534'. [ 664.063806][T14608] vhci_hcd: connection closed [ 664.065254][ T1053] vhci_hcd vhci_hcd.5: stop threads [ 664.080091][ C0] syzkaller0: tun_net_xmit 76 [ 664.121129][ T1053] vhci_hcd vhci_hcd.5: release socket [ 664.148343][ T1053] vhci_hcd vhci_hcd.5: disconnect device done [ 664.780103][ T5694] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 665.077475][ T5694] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.120157][ C0] syzkaller0: tun_net_xmit 76 [ 665.156552][ T5694] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 665.190802][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 665.219061][ T5694] usb 1-1: Product: syz [ 665.231914][ T5694] usb 1-1: Manufacturer: syz [ 665.239780][ T5694] usb 1-1: SerialNumber: syz [ 665.517596][ T5694] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 665.556017][ T5724] usb 5-1: USB disconnect, device number 23 [ 665.743725][ T5694] usb 1-1: USB disconnect, device number 35 [ 665.777493][ T5694] usblp0: removed [ 666.160167][ C0] syzkaller0: tun_net_xmit 76 [ 666.397583][T14639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2545'. Stopping klogd: [ 666.605664][T14641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium OK [ 667.200272][ C0] syzkaller0: tun_net_xmit 76 Stopping acpid: [ 668.240136][ C0] syzkaller0: tun_net_xmit 76 [ 668.343392][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.395140][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.424354][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2551'. [ 668.455429][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.488921][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.528196][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2551'. OK [ 668.836465][T14669] loop2: detected capacity change from 0 to 7 [ 668.860656][T14669] Dev loop2: unable to read RDB block 7 [ 668.866347][T14669] loop2: unable to read partition table [ 668.872961][T14669] loop2: partition table beyond EOD, truncated [ 668.887870][T14669] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) Stopping syslogd: stopped /sbin/syslogd (pid 4976) OK [ 669.233367][ T7502] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 669.280122][ C0] syzkaller0: tun_net_xmit 76 [ 669.374903][T14686] netlink: 'syz.2.2558': attribute type 10 has an invalid length. [ 669.444287][ T7502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.461776][ T7502] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 669.477406][ T7502] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.502398][ T7502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.518251][ T7502] usb 5-1: config 0 descriptor?? [ 669.544465][ T7502] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 669.809974][ T7502] usb 6-1: new high-speed USB device number 34 using dummy_hcd umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 669.960183][ T7502] usb 6-1: Using ep0 maxpacket: 8 [ 669.976427][ T7502] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.013101][ T7502] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 670.043882][ T7502] usb 6-1: config 0 interface 0 has no altsetting 0 [ 670.063558][ T7502] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00 [ 670.092199][T14696] netlink: 'syz.4.2554': attribute type 1 has an invalid length. [ 670.095798][ T7502] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.154978][ T7502] usb 6-1: config 0 descriptor?? [ 670.242466][T14699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root [ 670.276241][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2554'. read-only The system is going down NOW! [ 670.320098][ C0] syzkaller0: tun_net_xmit 76 [ 670.341358][ T4994] udevd[4994]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes [ 670.511757][ T7502] usbhid 6-1:0.0: can't add hid device: -71 [ 670.566845][ T7502] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 670.602968][ T7502] usb 6-1: USB disconnect, device number 34 Connection to 10.128.0.200 closed by remote host. [ 670.787022][T12996] raw-gadget.0 gadget.2: failed to queue disconnect event [ 670.851440][ T5694] usb 5-1: USB disconnect, device number 24 [ 671.067019][ T7865] tipc: Resetting bearer [ 671.424823][ T7865] tipc: Disabling bearer [ 671.657299][ T9175] syz_tun (unregistering): left allmulticast mode Sent SIGKILL to all processes Requesting system poweroff [ 672.181731][T12479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.322931][T12479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.421990][T12479] .`: (slave netdevsim1): Releasing backup interface [ 672.434296][T12479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.548323][T12479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.649736][T12479] bridge_slave_1: left allmulticast mode [ 672.655551][T12479] bridge_slave_1: left promiscuous mode [ 672.661507][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.740111][T14702] smc: removing smcd device lo [ 672.798319][ T2367] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 672.807237][ T2367] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 672.816677][ T2367] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 672.827091][ T2367] pvrusb2: Failure uploading firmware1 [ 672.832933][ T2367] pvrusb2: Device initialization was not successful. [ 672.839660][ T2367] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 672.849096][ T2367] pvrusb2: Failed to submit write-control URB status=-19 [ 672.860431][ T10] pvrusb2: Device being rendered inoperable [ 672.882584][T12479] gretap0 (unregistering): left promiscuous mode [ 672.892269][ T2367] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 672.910418][ T2367] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 672.924078][ T2367] ------------[ cut here ]------------ [ 672.929594][ T2367] ret [ 672.929614][ T2367] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x755/0xa40, CPU#0: pvrusb2-context/2367 [ 672.945193][ T2367] Modules linked in: [ 672.950557][ T2367] CPU: 0 UID: 0 PID: 2367 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 672.961984][ T2367] Tainted: [L]=SOFTLOCKUP [ 672.966385][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.976540][ T2367] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 672.983128][ T2367] Code: 9a fb e9 48 fc ff ff e8 99 35 9a fb c6 05 5c 41 14 0a 01 48 c7 c7 60 35 76 8c e8 26 e0 fa fa e9 70 fc ff ff e8 7c 35 9a fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 36 76 8c 4c 89 e2 e8 c6 58 ff fa e9 [ 673.003101][ T2367] RSP: 0018:ffffc900077e7680 EFLAGS: 00010293 [ 673.009189][ T2367] RAX: ffffffff862cdf54 RBX: dffffc0000000000 RCX: ffff88802c6edd00 [ 673.017272][ T2367] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 673.025312][ T2367] RBP: 0000000000000001 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 673.033368][ T2367] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: ffffffff8cd115e0 [ 673.041769][ T2367] R13: 0000000000001770 R14: ffff8880226860b0 R15: 00000000fffffff5 [ 673.049850][ T2367] FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 673.058832][ T2367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.065463][ T2367] CR2: 00005555614839c8 CR3: 000000003131a000 CR4: 00000000003526f0 [ 673.073499][ T2367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 673.081544][ T2367] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 673.089562][ T2367] Call Trace: [ 673.092886][ T2367] [ 673.095846][ T2367] ? kfree+0x1c5/0x640 [ 673.099980][ T2367] _request_firmware+0x1049/0x1780 [ 673.105149][ T2367] ? __pfx__request_firmware+0x10/0x10 [ 673.110670][ T2367] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 673.116342][ T2367] request_firmware+0x36/0x50 [ 673.121206][ T2367] pvr2_locate_firmware+0xb3/0x500 [ 673.126365][ T2367] pvr2_upload_firmware1+0x1bd/0x940 [ 673.131757][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.137781][ T2367] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 673.143665][ T2367] pvr2_hdw_initialize+0x425/0x3c60 [ 673.148906][ T2367] ? __mutex_trylock_common+0x15f/0x270 [ 673.154513][ T2367] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 673.160203][ T2367] ? rcu_is_watching+0x15/0xb0 [ 673.165012][ T2367] ? trace_contention_end+0x3d/0x140 [ 673.170334][ T2367] ? pvr2_context_thread_func+0x279/0xc10 [ 673.176150][ T2367] ? __mutex_unlock_slowpath+0x731/0x900 [ 673.181840][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.187837][ T2367] ? schedule+0x90/0x2b0 [ 673.192119][ T2367] ? schedule+0x16e/0x2b0 [ 673.196461][ T2367] pvr2_context_thread_func+0x504/0xc10 [ 673.202075][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 673.208150][ T2367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 673.214257][ T2367] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 673.220120][ T2367] ? __kthread_parkme+0x71/0x1f0 [ 673.225097][ T2367] ? __kthread_parkme+0x196/0x1f0 [ 673.230185][ T2367] kthread+0x388/0x470 [ 673.234279][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 673.240397][ T2367] ? __pfx_kthread+0x10/0x10 [ 673.245035][ T2367] ret_from_fork+0x514/0xb70 [ 673.249714][ T2367] ? __pfx_ret_from_fork+0x10/0x10 [ 673.254865][ T2367] ? __switch_to+0xc89/0x1420 [ 673.259551][ T2367] ? __pfx_kthread+0x10/0x10 [ 673.264180][ T2367] ret_from_fork_asm+0x1a/0x30 [ 673.268957][ T2367] [ 673.272013][ T2367] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 673.279298][ T2367] CPU: 0 UID: 0 PID: 2367 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 673.290602][ T2367] Tainted: [L]=SOFTLOCKUP [ 673.294930][ T2367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.304985][ T2367] Call Trace: [ 673.308272][ T2367] [ 673.311205][ T2367] vpanic+0x56c/0xa60 [ 673.315231][ T2367] ? __pfx__printk+0x10/0x10 [ 673.319844][ T2367] ? __pfx_vpanic+0x10/0x10 [ 673.324374][ T2367] ? is_bpf_text_address+0x292/0x2b0 [ 673.329672][ T2367] ? is_bpf_text_address+0x26/0x2b0 [ 673.334906][ T2367] panic+0xc5/0xd0 [ 673.338667][ T2367] ? __pfx_panic+0x10/0x10 [ 673.343110][ T2367] ? ret_from_fork_asm+0x1a/0x30 [ 673.348054][ T2367] __warn+0x315/0x4c0 [ 673.352043][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 673.357716][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 673.363367][ T2367] __report_bug+0x276/0x570 [ 673.367978][ T2367] ? __pfx___schedule+0x10/0x10 [ 673.372840][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 673.378480][ T2367] ? __pfx___report_bug+0x10/0x10 [ 673.383530][ T2367] ? preempt_schedule_thunk+0x16/0x40 [ 673.388936][ T2367] ? preempt_schedule_common+0x82/0xd0 [ 673.394406][ T2367] ? preempt_schedule_thunk+0x16/0x40 [ 673.399833][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 673.405480][ T2367] report_bug+0x16a/0x220 [ 673.409829][ T2367] ? firmware_fallback_sysfs+0x755/0xa40 [ 673.415478][ T2367] ? firmware_fallback_sysfs+0x757/0xa40 [ 673.421142][ T2367] handle_bug+0x9c/0x200 [ 673.425412][ T2367] exc_invalid_op+0x1a/0x50 [ 673.429928][ T2367] asm_exc_invalid_op+0x1a/0x20 [ 673.434801][ T2367] RIP: 0010:firmware_fallback_sysfs+0x755/0xa40 [ 673.441049][ T2367] Code: 9a fb e9 48 fc ff ff e8 99 35 9a fb c6 05 5c 41 14 0a 01 48 c7 c7 60 35 76 8c e8 26 e0 fa fa e9 70 fc ff ff e8 7c 35 9a fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 36 76 8c 4c 89 e2 e8 c6 58 ff fa e9 [ 673.460656][ T2367] RSP: 0018:ffffc900077e7680 EFLAGS: 00010293 [ 673.466732][ T2367] RAX: ffffffff862cdf54 RBX: dffffc0000000000 RCX: ffff88802c6edd00 [ 673.474725][ T2367] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 673.482715][ T2367] RBP: 0000000000000001 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 673.490712][ T2367] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: ffffffff8cd115e0 [ 673.498688][ T2367] R13: 0000000000001770 R14: ffff8880226860b0 R15: 00000000fffffff5 [ 673.506671][ T2367] ? firmware_fallback_sysfs+0x754/0xa40 [ 673.512329][ T2367] ? kfree+0x1c5/0x640 [ 673.516424][ T2367] _request_firmware+0x1049/0x1780 [ 673.521573][ T2367] ? __pfx__request_firmware+0x10/0x10 [ 673.527051][ T2367] ? pvr2_send_request_ex+0x1a8c/0x2240 [ 673.532626][ T2367] request_firmware+0x36/0x50 [ 673.537346][ T2367] pvr2_locate_firmware+0xb3/0x500 [ 673.542475][ T2367] pvr2_upload_firmware1+0x1bd/0x940 [ 673.547774][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.553763][ T2367] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 673.559600][ T2367] pvr2_hdw_initialize+0x425/0x3c60 [ 673.564818][ T2367] ? __mutex_trylock_common+0x15f/0x270 [ 673.570368][ T2367] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 673.576024][ T2367] ? rcu_is_watching+0x15/0xb0 [ 673.580803][ T2367] ? trace_contention_end+0x3d/0x140 [ 673.586125][ T2367] ? pvr2_context_thread_func+0x279/0xc10 [ 673.591859][ T2367] ? __mutex_unlock_slowpath+0x731/0x900 [ 673.597509][ T2367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.603495][ T2367] ? schedule+0x90/0x2b0 [ 673.607748][ T2367] ? schedule+0x16e/0x2b0 [ 673.612082][ T2367] pvr2_context_thread_func+0x504/0xc10 [ 673.617638][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 673.623708][ T2367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 673.629779][ T2367] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 673.635650][ T2367] ? __kthread_parkme+0x71/0x1f0 [ 673.640630][ T2367] ? __kthread_parkme+0x196/0x1f0 [ 673.645716][ T2367] kthread+0x388/0x470 [ 673.649835][ T2367] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 673.655932][ T2367] ? __pfx_kthread+0x10/0x10 [ 673.660565][ T2367] ret_from_fork+0x514/0xb70 [ 673.665178][ T2367] ? __pfx_ret_from_fork+0x10/0x10 [ 673.670310][ T2367] ? __switch_to+0xc89/0x1420 [ 673.674996][ T2367] ? __pfx_kthread+0x10/0x10 [ 673.679593][ T2367] ret_from_fork_asm+0x1a/0x30 [ 673.684396][ T2367] [ 673.688103][ T2367] Kernel Offset: disabled [ 673.692448][ T2367] Rebooting in 86400 seconds..